Privacy Policy
Last updated: July 27, 2026
This policy explains what happens to your data when you use alltinytools. It is written to be read, not to be impressive.
The short version: the files you process here never leave your device. Everything else on this page is about the much smaller amount of data that any website unavoidably sees, plus the advertising that pays for the site.
Who is responsible
Damir Magamedov, a private individual established in Ukraine, is the controller of the personal data described below.
Contact for any privacy matter: [email protected]
Your files are never uploaded
Every tool on this site — image resizing, compression, HEIC conversion, video remuxing, audio extraction — runs entirely inside your web browser, on your own device, using your own processor.
Concretely, this means:
- Your files are never transmitted to alltinytools, to any server, or to any third party.
- They are never stored, copied, inspected, or retained by us, because we never receive them.
- We could not hand them over to anyone, in response to any request, because we do not have them.
- Once you close or reload the page, the files and their processed results are gone from memory.
You can verify this yourself: load any tool page, disconnect from the internet, and then process a file. It will still work. Nothing that requires a network round-trip could do that.
What data is actually processed
| What | Why | Legal basis | How long | Who sees it |
|---|---|---|---|---|
| Your IP address and request details (browser type, page requested, approximate region) | Technically unavoidable — it is how a web page reaches you, and it protects the site from abuse | Legitimate interest in delivering and protecting the site | Kept in short-lived infrastructure logs by our host, then discarded | Cloudflare (our host) |
| Aggregate page-view counts | To know which tools people find useful | Legitimate interest in understanding basic usage | Retained as aggregate statistics only, never tied to you | Cloudflare Web Analytics |
| Advertising data stored on your device | To avoid showing you the same ad over and over, and to detect click fraud | Your consent — nothing is set until you agree | Set and cleared by Google according to their policy; removed when you withdraw consent | Google AdSense |
| Your saved tool presets | So your own resize presets survive a page reload | Legitimate interest in a working feature; the data never leaves your browser | Until you delete them or clear your browser storage | Nobody — this stays on your device |
| Your advertising choice | To remember your accept/reject decision and stop asking | Necessary to honour your choice | Until you change it or clear your browser storage | Nobody — this stays on your device |
There is no account system, no login, no newsletter, no contact form, and no payment processing on this site. We hold no database of users, because there is no server that could hold one.
Advertising is not personalised
This site shows non-personalised advertising only. Ads are selected from the general context of the page and your approximate location, not from a profile of you, and not from your activity on other sites. We do not participate in personalised or interest-based advertising, and we do not use a consent-management vendor that shares your data with a list of advertising partners.
Non-personalised does not mean storage-free. Google AdSense still stores a small amount of data on your device to limit how often you see the same ad and to detect fraud. That is exactly why we ask for your consent before any ad loads, and why rejecting is a single click that changes nothing about how the tools work.
Who else is involved
These are every third party that can see anything at all connected to your visit:
| Service | Role | What it can access | Basis | Their policy |
|---|---|---|---|---|
| Cloudflare Pages | Hosting & delivery | Your IP address and request details (browser, page requested), as a technical necessity of delivering the site | Essential | Read it |
| Cloudflare Web Analytics | Visitor measurement | Aggregate page-view counts. No cookies, no identifiers, nothing stored on your device | Essential | Read it |
| Google Search Console | Site verification | Nothing from your visit. A verification tag in the page proves site ownership to Google | Essential — not currently active | Read it |
| Google AdSense | Advertising | Your IP address, browser details, and storage on your device used for frequency capping and fraud prevention. Not used to build a profile or target you | Only with your consent — not currently active | Read it |
| Ko-fi | Donations | Only what you choose to give them on Ko-fi, after you leave this site. No payment data ever reaches alltinytools | Only if you click the link | Read it |
Data leaving the EU and Ukraine
The operator is in Ukraine. The service providers listed above are established in the United States and operate globally, so data they process may be handled outside the European Economic Area and outside Ukraine, under the safeguards described in their own policies linked in the table.
This matters less here than it would on most sites: the operator receives no personal data about you directly, and the files you process never enter this picture at all.
Your rights
If you are in the European Economic Area, the United Kingdom, or Ukraine, you have the right to:
- ask what personal data is held about you, and get a copy;
- have inaccurate data corrected;
- have data erased;
- restrict or object to processing;
- receive your data in a portable form;
- withdraw consent at any time, which for advertising you can do from the "Ad settings" link in the footer of every page.
To exercise any of these, write to [email protected]. You do not need to use a particular form of words.
An honest note on what a request can achieve: for the files you process, there is nothing to disclose, correct, or erase, because we never held them. For the aggregate visitor statistics, there is nothing that identifies you, so we cannot isolate "your" data within them. The requests we can act on meaningfully are those about advertising consent and anything you have emailed us.
If you think your rights have been breached, you can complain to the data protection authority in your country of residence, or in Ukraine to the Ukrainian Parliament Commissioner for Human Rights (the Ombudsman).
Children
These tools are not directed at children, and we do not knowingly process the personal data of anyone below the age of digital consent in their country. If you believe a child's data has reached us, write to [email protected] and we will deal with it.
Security
Because we never receive your files, the largest category of risk on a media-processing site simply does not exist here. The site is served over HTTPS. The advertising script is the only third-party code that runs on the page, and it runs only after you consent.
Changes to this policy
If this policy changes materially — a new service provider, a new purpose — the "last updated" date at the top changes, and if the change affects what you consented to, you will be asked again rather than silently carried over.