No file, text or number you enter here is ever transmitted
That is the entire policy, and it is a consequence of how the site is built rather than a commitment we ask you to trust. All 417 tools run inside your browser. There is no API to send your data to, no database to store it in, and no account to attach it to.
Last updated 16 August 2026
We never receive your files
There is no upload endpoint. Files are opened by your browser and stay in this tab.
We set no cookies
None at all: not functional, not analytical, not advertising. There is no consent banner because there is nothing to consent to.
We run no analytics
No Google Analytics, no Plausible, no pixel, no heatmap, no session recorder, no error-reporting beacon.
We have no accounts
Nothing to sign up for, so there is no email address, password or profile to store or lose.
We serve no ads
No ad network, no affiliate tags, no third-party scripts of any kind.
We share nothing
There is no data to sell, rent or hand over, because none is ever collected.
Your files and inputs
When you choose a file, your browser hands the tool a reference to it. The tool reads the bytes into the memory of this tab, does the work with JavaScript and WebAssembly running on your own processor, and produces the result as an in-memory object your browser then saves to your downloads folder.
The same is true of everything you type: text you paste into a formatter, numbers in a calculator, a password you generate, a secret you hash. None of it is sent anywhere. Close the tab and it is gone from memory.
We therefore hold no copy of your data, have nothing to delete on request, and could not produce your files in response to a legal demand even if we were compelled to. There is nothing to produce.
What is stored on your device
Two small preferences are kept in your browser’s localStorage, on your machine only. Neither is readable by us:
- theme: whether you chose the light, dark or system appearance.
- otd:recent-tools: the handful of tool names you opened most recently, so the search dialog can offer them again.
Clearing your browser’s site data removes both. Some tools may also cache their WebAssembly module in the browser’s standard HTTP cache so the second visit is faster; that cache contains program code, never your content.
What our server sees
onthisdevice.com is a set of static files delivered by a CDN. To send you a page, that CDN necessarily handles the ordinary mechanics of an HTTP request (your IP address, the URL requested, your user agent), exactly as every website on the internet does. We do not build profiles from it, do not join it to anything, and do not run analytics over it.
Crucially, that request happens when the page loads, before you have chosen anything. Using a tool generates no further request carrying your input.
Third parties
There are none embedded in the site. No third-party analytics, no advertising network, no social widgets, no comment system, no chat bubble, no CDN-hosted fonts or scripts. Everything the page needs is served from onthisdevice.com itself, which is also why nothing here can phone home on someone else’s behalf.
How to verify all of this
You do not have to believe a policy page. Open your browser’s developer tools, go to the Network tab, clear it, then use any tool with a real file. You will see the page’s own code and, for some tools, a WebAssembly module, and no request containing your data. For a stronger test, disconnect from the network entirely and run the tool again; it will still work.
Children
The site is suitable for all ages and collects no personal information from anyone, including children. There is no registration, no profile and no content submission.
Changes to this policy
If this page ever changes, the date at the top changes with it. The core commitment, that nothing you put into a tool leaves your device, is the reason the site exists, and it will not be weakened. Any feature that would require sending your data somewhere will simply not be built.
In one sentence
Your files and inputs never leave your device; we set no cookies, run no analytics, keep no accounts and share nothing, because none of it is ever collected in the first place.