Privacy Policy

The short version

The files you use with these tools are never uploaded, never seen by us, and never stored anywhere. There is no account system, so there is nothing to sign up for and no personal profile to build. This is not a policy choice we could quietly reverse — it is how the tools are built.

Your files

Every tool on this site runs entirely inside your browser, using your own device's processor and memory. When you drop a photo, video or document into a tool:

• The file is read directly from your device by your browser.
• It is processed in your browser's memory.
• The result is written back to your downloads folder.

At no point does the file, or any part of it, travel over the internet to us or to anyone else. We operate no server that receives files, because the tools do not need one.

You can confirm this yourself rather than trusting it. Open a tool, use it once so that anything it needs has arrived, then disconnect your device from the internet and use it again. It works. A tool that was quietly sending your file somewhere could not.

The reason for the first step: some tools need a large piece of software before they can start — a video encoder, a text-recognition engine, a background-removal model. Those are downloaded once and kept by your browser, and until that has happened the tool has nothing to run. The simpler tools, the calculators and the PDF and image ones, work offline from the first visit. What never travels either way is your file.

What is stored on your device

Two tools save small amounts of information in your own browser's local storage, so that the site remembers your preferences between visits. This data stays on your device, is never transmitted, and is not accessible to us.

You can remove all of it at any time by clearing your browser's site data for this domain. The invoice tool also has a "Start over" button that erases its saved details immediately.

Note what is not in that list: client names, invoice amounts, file contents, or anything else you process. Those exist only for as long as the page is open.

Server logs

This site is hosted on Vercel. Like virtually all web hosts, their infrastructure records standard technical information when a page is requested — the page URL, a timestamp, a browser user-agent string and an IP address. This is standard operational logging used for security and reliability, applies to the page itself and not to anything you process with the tools, and is handled under our host's own privacy terms.

Analytics

This site counts page views, using Vercel Web Analytics — the measurement built into the service that hosts it. It records which page was opened, roughly where in the world from, and what kind of browser and device. It sets no cookies, and it does not follow you to any other website.

What it does not do is build a profile of you. There is no identifier that persists between days, nothing is sold or shared with advertisers, and none of it touches the files you use with the tools — those are never sent anywhere at all, which is the subject of the whole of the rest of this page.

There is no Google Analytics here, and no tracking pixel.

Why any of it: this site is paid for by advertising, and the only way to know whether a page is worth keeping — or worth writing at all — is to know whether anybody reads it. That is the whole use it is put to.

This paragraph and the script itself are treated as one change, not two. The site once ran this while the policy said it did not, and a policy that only describes the site until somebody flips a switch elsewhere is not worth reading.

Cookies

This site sets no cookies of its own. The theme and invoice preferences described above use local storage, which is a different mechanism and is not transmitted with requests to any server.

Advertising is the exception, and it is not ours: once ads are served, Google and its partners may set cookies of their own. That is described in the advertising section below, including how to refuse them.

Fonts

Page typefaces are served from this domain, not from Google Fonts or any other font service. Nothing about your visit is sent to a third party in order to draw the text you are reading.

This was not always true. The site originally loaded its typefaces from Google Fonts, which sends your IP address and browser details to Google on every page. They are now self-hosted, and this paragraph was corrected when that changed.

Advertising

This site is paid for by display advertising rather than by charging you or selling anything about you. There is no subscription, and the tools do not become better if you pay, because there is no way to pay.

As of today the advertising slots on this site are empty placeholders. An application to Google AdSense is pending. The rest of this section describes what will happen once advertising is served, and is published in advance so that nothing about it arrives as a surprise.

Advertising will be served by Google AdSense. When it is:

• Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this site or to other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and other sites on the internet.
• You can opt out of personalised advertising at any time through Google's Ads Settings.
• You can opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info.
• If you are in the EEA, the UK or Switzerland, you will be asked for your choices before any personalised advertising is served, and you can change those choices later from the same prompt.

Two things worth being explicit about, because they are the questions people actually have.

Advertisers never see your files. The promise at the top of this policy is not weakened by advertising. Ad code runs in the page alongside the tools, not inside them; it has no access to what you convert, cut, merge or record, because none of that ever leaves your device for anyone to access. An advertiser learns that somebody visited a page about merging PDFs — the same thing it would learn from any website — and nothing whatsoever about the PDF.

Ads should never get in the way of a tool. If an advertisement covers a control, blocks a download, or makes a tool difficult to use on your device, that is a fault and we want to know about it. Tell us where you saw it and on what device, through the contact page.

If you are in the United States

California, and a growing number of other states, give residents rights over personal information held about them — including the right to tell a business not to sell it or share it for advertising that follows you between sites.

Most of those rights have nothing to attach to here. We do not hold personal information, we have never sold any, and there is no account, no mailing list and no profile to ask about. Nothing you do with the tools reaches us at all.

The exception is advertising, and it is worth stating plainly rather than leaving in a definition. The slots are still empty as of today, but once Google serves personalised ads here, the data Google collects to choose them can count as sharing for cross-context behavioural advertising under those state laws — not because we hand anything over, but because that is what the laws call it when an ad network follows a reader between sites.

So there are three ways to say no, and any of them is enough:

• The privacy prompt shown to visitors in covered states, which includes a Do not sell or share my personal information choice. It is served by Google alongside the ads and can be reopened at any time.
• Google's Ads Settings, which turns personalisation off across every site Google serves, not only this one.
• An ad blocker. We would rather you did not, because advertising is what pays for the tools being free — but saying so honestly is better than pretending it is not an option.

Refusing costs you nothing here. Every tool works identically either way, there is no reduced version and nothing is withheld. The ads simply become less well targeted, which is our problem rather than yours.

Children

These tools are intended for general use and are not directed at children under 13. We do not knowingly collect personal information from anyone, including children, because we do not collect personal information at all.

Your rights

Data protection laws such as the GDPR, the CCPA and their equivalents elsewhere give you rights to access, correct and delete personal data held about you. There are two separate answers here and it is worth keeping them apart.

Data we hold: none, so there is nothing to access, correct or delete. If you believe otherwise, contact us and we will look into it rather than quoting this paragraph back at you.

Data Google collects to serve advertising: that is a different question with a different answer, and it is covered in the advertising section above, along with every way to refuse it. If you are in the United States, the section after it sets out what the state laws call that and how to opt out.

Changes to this policy

If this policy changes, the date at the top of this page will change with it. Material changes are described plainly rather than buried — the advertising section above was written and published before a single ad was served, which is the standard we intend to keep.

Who is responsible for this

It All Stays Here is an independent project run by Pedro Dibelli, based in Argentina. There is no company and no team — one person, reachable at hello@itallstayshere.com.

Under the European General Data Protection Regulation that makes him the data controller for this site, which is worth stating even though the answer to "what data" is, deliberately, almost none. The exceptions are named above: your host's standard server logs, and the advertising cookies described in the advertising section once ads are running.

Contact

Questions about this policy can be sent to the address on our contact page.