Privacy Policy

This Privacy Policy outlines how ToolsWebPro ("we", "us", "our"), operated by founder Muhammad Saqlain and technology agency CortVista (cortvista.com) at toolswebpro.com, processes and protects user data across our free web tools and services.

Our Privacy-First Architecture

We prioritize client-side execution. Our photo editor, photo converter, image compressor, PDF tools, and encrypted chat run locally inside your browser memory using WebAssembly, HTML5 Canvas, and Web Crypto APIs. Your files, documents, and private photos are never uploaded to, stored on, or transmitted across remote servers.

Data We Process

We do not require user account registration, phone numbers, or passwords. When you interact with server-assisted features (such as social video extraction endpoints), our servers temporarily inspect public URLs to extract direct media streams. Technical server logs (IP address, user agent) are retained transiently strictly for rate-limiting and security monitoring before automatic deletion.

Advertising & Cookies

We display advertisements provided by Google AdSense to keep our online tools free. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.

Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the Internet.

• Users may opt out of personalized advertising by visiting Google's Ads Settings.
• Alternatively, users can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.

End-to-End Encrypted Chat Privacy

Messages sent via ToolsWebPro Secure Chat are encrypted locally on your device using 256-bit AES-GCM encryption before transmission. The decryption key resides exclusively inside your browser URL hash fragment (`#key`). Because browsers never send URL fragments to web servers, our backend relay only sees unreadable ciphertext. Chat room sessions automatically purge from server RAM after 30 minutes of inactivity.

Data Retention & Security

We implement industry-standard HTTPS TLS 1.3 encryption and security headers across all pages. We do not sell, rent, or trade personal data or browsing activity to third parties.

Contact Information & User Privacy Rights

If you have questions regarding this Privacy Policy, data privacy practices, or wish to exercise user rights, contact our privacy team at cybersakki@gmail.com or via our Contact Form.