Privacy model

Local-first tools for things you hesitate to paste online

Most LocalTools utilities run entirely in your browser. A small number of network tools use a server request because public HTTP headers and redirect chains cannot be checked reliably from browser-only JavaScript.

Browser-local tools

Browser-local tools process inputs on your device after the page loads. LocalTools does not receive the pasted text, token, image, or PDF for these tools.

No uploadNo accountBrowser-localNo pasted input stored

Server-assisted tools

Network tools send the public URL you enter to a LocalTools API so the server can fetch response headers or redirects. Private, local, reserved, and credentialed URLs are blocked before the request is followed.

Uses APIPublic URLs onlyPrivate hosts blockedNo account

How to verify behavior

Open your browser network panel before using a browser-local tool and confirm that the pasted input is not sent in a request.

Check the privacy badge on each tool page. Local tools are labeled Runs locally; public URL checks are labeled Uses API.

Avoid entering private URLs, internal hosts, credentials, or production secrets into any tool unless you have confirmed the workflow is appropriate.