Privacy Policy

_Last updated: 2026-05-21_

tool127 is a browser-based developer toolbox available at https://tool127.com. The tools are designed for 100% local processing: JSON payloads, JWTs, generated passwords, prompt text, QR content, and similar tool inputs are processed in your browser and are not sent to our servers.

Summary

• We do not transmit the content you paste, upload, generate, format, decode, compare, or inspect in the tools.
• Tool data is stored only in your browser when a feature needs it, using localStorage, sessionStorage, and IndexedDB.
• We do not require an account.
• We do not transmit tool content to analytics or advertising services.
• Optional Google Analytics 4 is loaded only after you explicitly accept analytics cookies.
• We do not load advertising, A/B testing, session replay, customer messaging, or tracking scripts that profile tool content.
• The site is hosted as static HTML on Cloudflare Pages.

Who is responsible

The site is operated by George Postoronca. Jurisdiction: Moldova. Contact: hello@tool127.com.

Because the application is static and local-first, we do not run an application backend that receives your tool inputs. The only network requests needed to use the site are for loading the static application files from tool127.com and optional user-initiated submissions described below.

What stays on your device

The following information may be saved locally in your browser:

• Settings — theme, accent color, language preference, editor options, and tool preferences.
• Tool history — recent local tool inputs/outputs and snapshots, where a tool offers history.
• Masking rules — redaction rules you choose to save.
• Cookie consent state — your analytics cookie choice, stored under tool127.cookie-consent.v2 and tool127.consent.analytics.

You can clear this data at any time from the in-app storage controls where available, or by clearing your browser's site data for tool127.com.

Hosting and request metadata

tool127 is hosted on Cloudflare Pages as static HTML. Like most web hosts and CDNs, Cloudflare Pages may process standard request metadata needed to deliver and protect the site, such as IP address, user agent, requested URL, timestamp, and security events. This metadata is handled by the hosting provider under its own infrastructure and retention practices.

We do not use that hosting metadata to profile you, and we do not combine it with tool content because we never receive your tool content.

Cookies, analytics, and similar technologies

tool127 does not set advertising cookies. The app uses browser storage for necessary local functionality, including settings, history, snapshots, and the cookie consent preference.

Analytics is optional. If you accept analytics cookies, we use Google Analytics 4 to collect aggregated usage statistics such as page views, device/browser information, approximate location, and interactions. Google Analytics is configured with Consent Mode v2, analytics storage defaults to denied, and advertising consent remains denied.

If you reject analytics, Google Analytics is not loaded for you and analytics events are blocked. You can change your choice later from Cookie settings in the footer.

See the Cookie Policy for details about necessary storage, Google Analytics cookies, retention, and controls.

What we do not collect

We do not collect or process:

• Names, email addresses, phone numbers, account identifiers, or similar personal identifiers through normal tool use.
• Text, files, JSON, JWTs, prompts, passwords, QR payloads, colors, UUIDs, or other data you enter into the tools.
• Advertising identifiers, heatmaps, session recordings, or analytics tied to tool content.
• Automated decision-making or profiling data.

Voluntary contact

If you choose to contact us by email, that action is voluntary. Your message and the metadata handled by the email providers involved may be processed so we can read and reply to it.

Email messages do not include the JSON or other tool payloads you are working on unless you manually add that information yourself.

We keep email correspondence only as long as needed to respond, handle follow-up questions, and maintain necessary records, then delete it when it is no longer needed.

Third parties

Current third parties:

• Cloudflare Pages — hosts and delivers the static site, and may process standard request metadata for delivery, security, and operations.
• Google Analytics 4 — optional aggregated usage analytics, loaded only after analytics consent.
• Your email provider and ours — if you email hello@tool127.com, the email is handled by the mail providers involved.

No Google AdSense, Sentry, PostHog, Plausible, Hotjar, FullStory, or similar third-party script is loaded by the current site.

Your rights

Under the EU GDPR, UK GDPR, CCPA/CPRA, and similar laws, you may have rights to access, correct, delete, restrict, export, or object to processing of personal data, and to lodge a complaint with your local supervisory authority.

For normal use of tool127, we generally cannot access or delete your tool data because it is stored only on your device. To delete it, clear site data for tool127.com in your browser, or use the in-app storage controls where available.

For privacy requests about email messages or other data you intentionally sent to us, contact hello@tool127.com. We aim to respond within 30 days.

Contact

For privacy, GDPR/CCPA, or security questions, email hello@tool127.com.