Privacy policy

GivenTool is designed so that your files, and the text you type into the tools, never leave your device. We do not have accounts, we do not ask for your name or email to use a tool, and we have no server that receives your files. The few requests that do go to another service (currency rates, cookieless page-view analytics and, if you choose them, "online" speech voices) are explained below.

Files you select are processed entirely inside your browser using Web Workers and WebAssembly. They are not uploaded, streamed or copied to any server operated by us or by a third party. There is no server-side queue and no retention: when you close the tab, nothing of your file remains anywhere except on your own device.

Downloaded results are written by your browser directly from memory to your storage. We never see file names, contents or metadata.

The same applies to text and form tools: text you paste into the JSON, Base64, URL, JWT, timestamp, regex or QR code tools, and the numbers you enter into calculators and document generators, are processed by JavaScript running in your tab and are never transmitted. The JWT decoder only decodes; it does not send the token anywhere and cannot verify signatures.

One exception you control: the text-to-speech tool uses the voices your browser and operating system provide. Voices marked "online" may send the text to the browser vendor's speech service (for example Google or Microsoft) to be spoken; voices without that label run on your device. The tool labels each voice so you can choose.

The site uses Cloudflare Web Analytics, the page-view statistics of our hosting provider, to count visits and measure page speed. It is cookieless: according to Cloudflare it does not use cookies or local storage and does not fingerprint visitors by IP address or user agent. Its small script (from static.cloudflareinsights.com) reports the page address, the referring page, your browser type and page-load timings to cloudflareinsights.com, where they are aggregated. It never sees your files or the text you type.

The tools also send anonymous usage events to this site's own server (the /api/e address on this domain), which stores them in Cloudflare Workers Analytics Engine, part of our hosting provider, so we can see which tools are used and whether they work. An event holds only: the event type (tool opened, file chosen, conversion started, finished or failed, download clicked, search made), the tool name, the page address without its query string, the page language, a device class from the screen width (phone, tablet or computer), the host name of the site that linked to us, the utm_source, utm_medium and utm_campaign tags of that link if it had them, the size range of the input and output (for example "1-10MB", never the exact size), the processing time, an error code, and for searches the length range of the query and whether a result was opened (never the query itself). File names, file contents, dimensions, text you type and metadata are never included; the event schema does not allow them.

Cloudflare adds the country, which it derives at its network edge. We never store your IP address or your browser's user agent (the user agent is read only to drop events from bots and is then discarded), we set no cookie and assign no identifier, so events cannot be linked to each other or to you. If your browser sends Global Privacy Control or Do Not Track, no events are sent at all. Analytics Engine keeps events for three months.

GivenTool sets no cookies for visitors. The only cookie the site itself can set is gt_admin, the sign-in cookie of the site owner's internal dashboard at /admin: it holds an expiry time and a signature (no personal data), is sent only to /admin pages, is HttpOnly, Secure and SameSite=Strict, and expires after 12 hours. Using the tools never sets it.

There is no advertising on the site at present. Before any ad network is switched on, this section will name it, link to its privacy policy and ad settings, and explain how consent is collected where the law requires it.

Pages, fonts, scripts and processing engines (including FFmpeg, the PDF engine, the OCR and speech-recognition models and the background-removal model) are served from our own domain. We do not load web fonts from a font CDN, and the site's content security policy blocks requests to other domains by default.

The content security policy allows these exceptions, and nothing else:

"Online" text-to-speech voices are provided by your browser, not by this site; when you pick one, your browser may send the text to its vendor's speech service. Links to official sources in guides and references open those sites, which are governed by their own policies. The prayer times tool can use your location if you allow it; the position is used in the page to calculate times and is not sent to us.

Your browser may cache the tool code and processing engines so they load faster next time. This is standard browser caching and contains no personal data.

The transcription tools (video to transcript, audio to text, subtitles) download a speech-recognition model the first time you use them, between about 45 MB and 250 MB depending on the quality you pick, and keep it in your browser's Cache Storage so later visits do not download it again. The transcriber also remembers the spoken language you last chose, in local storage. Both contain no personal data.

The CV builder saves your draft in your browser's local storage so you do not lose work when you reload the page. That draft stays on your device.

When you use a one-click fix on Fix my file, or open the SOP generator from the screen recorder or a transcript, the file (and the transcript) is kept briefly in your browser's IndexedDB storage so the next page can open it, even after a reload. It is deleted as soon as that page opens it; anything left behind is ignored after 30 minutes and removed the next time a file is handed over. When the file workspace opens a tool with your files, they are passed in the page's memory only and are gone after a reload. None of this leaves your device.

You can delete all of this at any time by clearing this site's data (cookies and site data) in your browser settings.

Because files and typed text are never sent to us, we hold nothing to retain or delete. If you email us, we keep the correspondence only as long as needed to answer and follow up, and we do not use your address for marketing. Standard web server logs (IP address, requested URL, time and browser type) may be kept by our hosting provider for a short period for security and reliability.

If what we collect changes, for example when an analytics or ad provider is added, this page will be updated before the change takes effect and the date at the top will change.

Questions about privacy can be sent to [email protected].