Last updated 6 October 2026
The short version
- Your file contents are never uploaded to us. Most tools process input in your browser; direct-transfer and network tools explain their connection metadata below.
- We don’t use cookies for tracking or advertising, and we don’t ask you to create an account.
Your files and text
Every tool marked “stays on this device” works entirely inside your web browser. When you choose a file or type text, it is read into your device’s memory and processed there. It is not uploaded, stored or logged by us, and it is gone when you close the page. Our website enforces this with a Content Security Policy that stops pages from sending data to other servers. Read how this works and how to check it yourself.
The HTTP request tool sends data by design: the HTTP Request Tester, whose job is to send the request you build. It is labelled “sent only where you point it”. The request goes straight from your browser to the address you enter — it does not pass through our servers, and we never see it or the response. Nothing is saved: closing the page forgets the request. The Content Security Policy is relaxed on that one page only, so it can reach addresses you enter; every other page stays locked to this website.
Direct file transfers and temporary signaling
The Local File Transfer tool uses a temporary Cloudflare Worker and Durable Object room to exchange connection information: SDP, host ICE candidates and connection state. This includes network/session metadata and normal connection information such as IP addresses. A private room capability is sent in WebSocket headers, not HTTP page URLs. Waiting rooms expire after five minutes; signaling has a ten-minute absolute lifetime and normally closes shortly after the peers connect. No room payloads are written to a database or application logs; routine hosting/security metadata may still be handled by Cloudflare.
File contents, names and SHA-256 hashes go only through the encrypted browser-to-browser DataChannel. They are never uploaded, proxied or stored by UtilTray. No TURN relay or server-upload fallback is used. Received files are held in bounded browser memory or streamed to a folder you explicitly choose. Transfer pages disable third-party analytics and advertising scripts and do not keep room or transfer history. The manual Wi-Fi Transfer tool instead exchanges connection codes without a signaling service; it also sends file contents directly to the paired device.
The QR Code Reader can use your camera if you choose Scan with camera. The camera picture is read in your browser to find a code; it is never recorded, stored or sent, and the camera turns off once a code is found.
Visit statistics
We don’t currently collect visit statistics. If we start, this section will say exactly what is counted, and it will never include anything you enter into a tool.
Hosting and server logs
Like every website, our hosting provider receives technical information when your browser requests a page, such as your IP address and the time of the request. This is used to deliver the site and protect it from abuse, and is not combined with anything you do in the tools.
Information stored on your device
If you switch between light and dark mode, your choice is saved in your browser’s local storage so the site looks the same next time. It never leaves your device, and you can clear it at any time in your browser settings.
Links to other websites
Some pages link to other websites, such as OpenStreetMap from the EXIF Viewer. Those sites have their own privacy policies; nothing is sent to them unless you click the link.
Tool suggestions
The Suggest a tool page links to a form run by Tally, not by this website. Anything you type into that form, including an email address if you choose to give one, is sent toTally and to us, and is covered by Tally’s privacy policy. We use suggestions only to decide what to build, and an email address only to tell you about your suggestion.
Children
The tools don’t collect personal information, so they can be used by people of any age.
Changes to this policy
If we change how data is handled, for example by adding advertising, we will update this page and the date above first.