Your files stay yours

Toolpit processes files locally using JavaScript and WebAssembly. We do not upload your file contents for processing or store your processed files on our servers. Saved downloads remain on your device, and browser caches and settings can remain after you close a tab.

That is the strong claim on this page, and it is about your files. Three other things are true and are set out in full below: if you create an account to save results, we hold your email, optional name, a hashed password, your token balance and its history, and purchase records; a handful of things are saved in your own browser; and the website carries Google AdSense ads, which use cookies that follow you across sites. Read on rather than stopping here.

Private — processed on your device, never uploaded

What Toolpit does not collect

• Your files. There is no upload endpoint. A file you open is read into this browser tab and nowhere else.
• Your results. Output files are built in memory and handed straight to your browser’s download flow. Charging a download sends one request — “charge one download to my account” — which carries no file, no filename and nothing read out of a file.

Your account

Using a tool needs no account. Saving a result does: a new account gets 50 tokens once its email address is confirmed (once per address), and each download costs 10. An account holds only what it takes to run that:

• Your name, email address and password. The name is shown only on your account page. The password is never stored as typed: we keep only a one-way scrypt hash of it, which cannot be turned back into the password.
• Your token balance and its history. Each entry records an amount, a reason (sign-up bonus, purchase, download, refund) and a time. Never what was downloaded.
• Purchase records. When you buy tokens in the app, Google Play or the App Store takes the payment and RevenueCat confirms it to us. We receive the product, a transaction ID, your account ID and the country — not your card or bank details, which only the store holds.
• A hash of your email for bonus eligibility. Kept even after you delete your account, only so that the 50-token sign-up bonus is given once per address. This is retained for bonus eligibility, rather than treated as anonymous data: anyone who already knows or can guess an address could check it against the hash, so we treat it as personal data and use it for nothing else.
• A sign-up waiting for confirmation. When you sign up, the address, optional name and password hash are kept as a pending sign-up until you confirm the email, for at most 24 hours; nothing is granted before then. The confirmation email is sent through our email provider, Resend, which receives your address and the message. The link’s secret is stored only as a hash, and is placed after the “#” of the link so it is not sent to our servers or written to logs when you open it.
• Brief abuse limits. Sign-up, resend and confirmation and sign-in attempts are counted to stop floods and password guessing. We keep one-way hashes of the address and network address for sign-up and resend limits, and the address itself for failed sign-ins and confirmations. Both are deleted after a day.

You can delete your account at any time, from your account page or from Account in the app. That removes your name, email, balance and its history immediately. Unused tokens are not refunded. Account data is stored in our database, hosted by Neon in the United States, and is never sold or used for advertising.

What is stored on your device

A few things are kept in your own browser so the site is usable. Apart from your sign-in session, none of them is sent to us, and clearing your site data removes all of them.

• Your sign-in session. If you sign in, a session token is kept in this browser so you stay signed in. It is sent with account requests (your balance, charging a download) and nothing else. Signing out removes it.
• “Don’t ask again”. If you tick it, the download confirmation is skipped on this device.
• Your theme. Whether you picked light or dark.
• Resume drafts. Nothing. The resume builder writes nothing to this browser at all — not your name, not your phone number, not your employment history. The draft exists in the tab you have open and stops existing when you close or refresh it. To keep your work you save a file, which lands in your downloads where you can see it, move it, back it up or delete it like any other file. It used to autosave here, which never left the device but did outlive the session — the wrong trade for the most identifying document on this site, and for the borrowed and library computers it gets typed on.
• Saved builder templates. Chart and report layouts you save are kept the same way, on this device only.
• Downloaded AI models. The background-removal, upscaling and object-removal tools download a model file the first time you use them and keep it in your browser’s cache so it is not downloaded again. The model is fetched from a third-party host, which sees an ordinary file request and your IP address — the same as any download. Your image is not part of that request.
• Advertising cookies. Set by Google and its partners, described in the next section.

What is measured

Two Vercel scripts do report something, and it would be dishonest to leave them unmentioned on a page like this. Analytics counts page views — which tool pages people open, roughly where in the world from, and which site sent them. Speed Insights records how quickly pages actually load for real visitors: standard web-vitals timings and a coarse device class.

Both are cookieless and neither builds a profile of you or follows you to other sites. More to the point, Toolpit does not include your file contents, file names or extracted text in analytics requests. If you would rather send nothing at all, any content blocker will stop both, and every tool keeps working exactly as before.

Advertising

Processing and previews on Toolpit are free. The website is paid for partly by token purchases and partly by advertising: content pages on this site (the home page, tool pages and guides) carry ads served by Google AdSense. This is the part of the site that does involve third-party tracking, and it would be misleading to describe the rest of this page without saying so plainly.

Google and its partners use cookies and similar technologies to serve those ads. That includes personalised advertising based on your prior visits to this and other websites, and it means Google can recognise you across sites in a way nothing else on Toolpit does. Third-party vendors, including Google, may also use cookies to serve ads based on someone’s past visits here.

You can turn personalised advertising off, for Google’s ads anywhere on the web, at Google Ads Settings. How Google uses data from sites that show its ads is set out at google.com/policies/technologies/partner-sites. Third-party vendors other than Google can be opted out of at aboutads.info/choices. Turning ads off entirely with a content blocker also works, and every tool on this site keeps working exactly as before if you do.

Toolpit does not send your file contents, file names or extracted text in advertising requests. Advertising services still receive browser and network information as described above; local file processing does not mean the website makes no network requests.

Hosting

The site is hosted on Vercel. Like any web host, it sees ordinary request logs for the pages themselves and for account requests — never a file you processed, because your files are never part of a request.

No watermarks

Tokens pay for downloads, not for quality. There is no premium tier that unlocks a better result, so there is no reason to degrade your output. What a tool produces is the result at the quality and dimensions supported by the selected tool and settings. Conversions can change layout or lose unsupported features; keep your originals and check the result before relying on it.

The mobile app

The Toolpit app for Android and iPhone works the same way: files are processed on the phone and never uploaded. It uses the same account and balance as this site, and the camera only when you choose QR scanning or document scanning and grant permission. Exports may be stored temporarily in the app’s local cache before you save or share them. Closing the app does not necessarily delete those local files. The app shows no ads.

Children

Toolpit is a general-audience utility site and is not directed at children under 13. We do not knowingly create accounts for, or collect personal information from, children under 13. If you believe a child has made an account, write to us and we will delete it.

Questions

Anything about this page, including advertising, goes to our contact page or straight to contact@toolpit.app. This policy was last updated on 10 October 2026.