Your files stay with you

Why PocketToolbox does not need to upload your files, how to check it yourself and where the exceptions are.

How it works

Many online converters upload your file to their server, convert it there and send the result back. PocketToolbox works differently. When you open a tool, your browser downloads the program, and the actual work happens on your device. The tools use JavaScript, WebAssembly and interfaces every current browser ships with, such as Canvas for images or the Web Audio API for sound.

Your browser creates the result itself and offers it for download. The file never reaches our server, so we could not store, analyze or share it even if we wanted to.

Check it yourself

  1. Open a tool, for example Compress image.
  2. Disconnect from the internet: Wi-Fi off or airplane mode on.
  3. Drop an image into the field. The tool still works because it does not need a server.

For a closer look, open your browser's developer tools (F12, "Network" tab). It lists every connection the page makes. When a file is processed, no upload shows up there.

Enforced by the browser

Every page is sent with a Content-Security-Policy. This header tells the browser which servers it may exchange data with at all. The browser blocks every other connection on its own, even if a script tried to make one. Only our own domain and the services listed in the next section are allowed. You can see the header in the developer tools under "Network" when you click the page itself.

Where data does leave your device

There are a few places, and you should know about them:

  • AI tool finder: Your question goes to our server and is answered there with Cloudflare Workers AI. No files are sent, and the question is not stored permanently.
  • DNS lookup: The domain name you enter goes to Cloudflare's DNS service (cloudflare-dns.com). There is no other way to look up a DNS record.
  • Text recognition (OCR): On first use, the tool downloads the recognition engine and language data from cdn.jsdelivr.net. Your image stays on your device.
  • Contact form: What you enter there reaches us by email. To block spam, the contact page loads Cloudflare Turnstile.
  • Analytics: Plausible counts page views, which tool was used and, for downloads, the file extension such as "pdf". No cookies, no file names and no content.

Everything else is in the privacy policy.