Privacy Policy
Last updated 30 July 2026.
The short version. There are no accounts, so I never ask you for a name, an email address or a payment method. Most tools here do all their work inside your browser, so your files, images and spreadsheets are never uploaded anywhere. Some tools need a server to do their job — those send only what the work requires, and never store it. Every tool page states which kind it is, and the table below lists all of them. The site uses Google Analytics, which sets cookies — in Europe it is not loaded until you allow it, and you can change that choice at any time in section 5. Details for all of that are below.
1. Information you give me
None. Tools Thicket has no sign-up, no login, no newsletter and no payment. I do not ask for your name, email address, phone number or any other personal detail in order to use any tool. If you choose to email me, I will have whatever you put in that email, and I use it only to answer you.
2. Where your files and text are actually processed
This is the part that matters most, so the rule comes first: a tool sends data to the server only when it cannot do the job without one, it sends only what that job needs, and it does not store what it receives. Anything that can run in your browser does, and the tools that handle your own files — images, spreadsheets, receipts, documents — are built that way deliberately.
Every tool page says which kind it is, and the table below is the current list. As tools are added or changed, this table and the date at the top of this page are updated with them.
| Tool | What leaves your browser |
|---|---|
| Duplicate Invoice Checker | Nothing. Your ledger is parsed and scanned in the page. |
| Metadata Scrubber (EXIF remover) | Nothing. Files are read and cleaned in the page. |
| Receipt Scanner to CSV | Nothing. OCR runs in the page. |
| Business Card OCR | Nothing. OCR runs in the page. |
| CSV to JSON Converter | Nothing. Parsing happens in the page. |
| Expense What-If Calculator | Nothing. |
| Mortgage Calculator | Nothing. |
| Percentage Calculator | Nothing. |
| Length Converter | Nothing. |
| WCAG Colour Contrast Checker | Nothing. |
| Background Remover |
Not your image. The image is processed in the page. Two requests do go to this site's own
server: it downloads the machine-learning model file, and it sends the file's type string
(for example image/png) to check the format is supported. No image data is
included in either.
|
| Word Counter | The text you paste. This tool sends your text to this site's own server, which counts the words and returns the numbers. The text is not written to disk, not logged and not retained after the response is sent — but it does leave your browser, so do not paste anything confidential into it. |
You do not have to take my word for any of this. Open your browser's developer tools, go to the Network tab, and use the tool: where the table says nothing leaves your browser, you will see no request carrying your data.
3. What the server records
- Access log. The application writes one line per request containing the time, the HTTP method and the URL requested. It does not write your IP address to this log.
- Rate limiting. To stop the tool APIs being hammered, the server keeps a count per IP address in memory. That counter is erased every 60 seconds and is never written to disk.
- Nothing else. The contents of what you compute, convert, scan or calculate are never written to a log. Where a tool has to send data to the server at all (see the table above), that data is held in memory only long enough to produce the answer and is discarded with the response.
4. Service providers
- Cloudflare sits in front of this site and carries all traffic to it. Like any network provider, Cloudflare processes connection information such as your IP address in order to route and protect the request. See Cloudflare's privacy policy.
- Google Analytics (measurement ID G-GXDDM8P1E1) tells me how many people visit and which tools they use. It sets cookies in your browser and sends usage data, including your IP address, to Google. I use it to decide which tools are worth improving, and I do not upload anything about you to it. It is not currently connected to any advertising product; if that changes, section 6 will say so. Whether it runs at all depends on your consent — see section 5. See Google's privacy policy. You can also block it permanently with the Google Analytics opt-out add-on, or with any content blocker — the tools all work normally with it blocked.
That is the complete list. In particular the site's typefaces are served from this domain, not from Google Fonts — they are open-licensed fonts hosted here, so displaying a page does not hand your IP address to a font CDN. This matters because fonts are needed to render the page at all: a request like that would happen before you could be asked about it, and no consent banner could cover it.
5. Consent and cookies
If you are visiting from the EEA, the UK or Switzerland — or if the network cannot tell me where you are — Google Analytics is not loaded at all until you say yes. The tag is simply absent from the page; a banner asks, and only if you choose “Allow analytics” is it fetched and started. Choosing “No thanks”, or ignoring the banner, means it never runs. There is no pre-ticked box and no “continuing to browse counts as consent”.
Your choice is remembered in your browser's local storage under
tt-analytics-consent. That is not a cookie and is never sent to the server — it only
exists so you are not asked again on every page.
Elsewhere in the world analytics loads by default, which is why the banner does not appear. You can still turn it off, using the same control below.
Your current choice: checking…
Changing this takes effect immediately. Turning it off stops any further data being sent; anything already collected is held by Google under their policy.
Beyond Google Analytics, nothing on this site sets a cookie. Nothing here uses cookies to identify you, remember you between visits, or personalise what you see.
6. Advertising
As of the date at the top of this page there is no advertising on this site, and no ad network or ad tracking pixel is loaded. I may add advertising later to cover what it costs to run — if I do, I will update this page to name the ad provider and say what it collects before the first ad appears, rather than after.
7. Things this site does not do
- I do not sell, rent or trade your data to anyone.
- I do not upload the contents of your files, or anything you compute here, to any third party.
- No social media trackers, session recorders or heatmaps.
- Google Analytics, when you have allowed it, is the only thing on any page that is loaded from outside this site. Everything else — each tool's code, the styling, the typefaces, and any machine-learning model a tool needs — is served from this domain. Decline analytics and a page makes no third-party requests at all.
8. Children
These tools are general-purpose utilities and are not directed at children. Since no personal information is collected from anyone, none is knowingly collected from children either.
9. Your rights
Depending on where you live, you may have the right to ask what data is held about you, to have it corrected or deleted, or to object to its processing. In practice I hold almost nothing: no account, no profile, no file you have processed. What exists is the analytics data held by Google and the short-lived request records described above. If you want to exercise any of these rights, or you simply want to know what I have, email me and I will answer.
10. Changes
If I change what this site collects, I will update this page and change the date at the top. This policy is versioned along with the site's source code, so changes to it are part of the site's history rather than a silent edit.
11. Contact
Tools Thicket is run by Ceniy Mei. For anything on this page — questions, corrections, or a request about your data — write to [email protected]. More about who builds this site and how is on the about page.