This policy explains what happens to your files and data when you use UUTOOLS.NET. We have designed the site to collect as little as possible, and this page describes what the software actually does.
Who is responsible
UUTOOLS.NET is operated by UUTOOLS.NET. You can contact us at [email protected].
Your images
Processed in your browser (the normal case)
When you use an image tool, the image is read and processed by your own web browser on your device. It is not uploaded to us, and we cannot see it, its name or its metadata. The result is created on your device and saved by your browser when you download it.
Images created by the tools do not include the original file's metadata (such as EXIF camera data or GPS location), because the image is redrawn before it is saved.
Some formats need extra programs that browsers don't include: a HEIC decoder (for iPhone photos in browsers that can't read HEIC), a TIFF reader and writer, a GIF writer and an AVIF encoder. They are loaded from our own site only when you use that format, and they also run entirely on your device. SVG files are drawn by your browser in a sandbox, so scripts or links inside them never run.
Server processing (only with your permission)
Some files cannot be processed by a particular browser, for example because they are larger than the browser can safely handle or because the browser cannot create the requested format. In that case the tool explains why and asks whether you want to convert that file on our server. Nothing is uploaded unless you choose “Upload and convert”. Videos, audio files, documents, spreadsheets and e-books in the converters (for example Word, Excel, Pages or EPUB files) are always converted on our server, because browsers cannot convert them; they too are uploaded only after you agree.
If you agree:
- the file is sent over an encrypted (HTTPS) connection, in parts, without its original file name;
- it waits in a queue and is converted by our server; your browser shows its place in the queue and the progress;
- the Because they contain no personal data, the daily totals are kept permanently as long-term statistics. You can delete it earlier at any time with the delete button; failed and abandoned uploads are deleted within a day;
- only your browser receives the secret key needed to see, download or delete the job; it is kept in your browser’s local storage together with the file name, which is never sent to us;
- our application log records only technical facts needed to keep the service running: which tool was used, the output format, the image size in megapixels, how long processing took and any error. It does not record file names or file contents.
Files added from a link or cloud storage
When you add a file from a link, your browser downloads it from that website. Only if the website does not allow this does our server fetch the file once for you: it sees the link, downloads the file, passes it straight back to your browser and keeps neither the link nor the file. Our log records only the file type and size.
Usage statistics
To understand which tools are useful and whether they work, the site counts events such as “a tool page was viewed”, “an image was converted”, “processing failed” or “a result was downloaded”. Each event may include the tool, the page language, whether processing happened in the browser or on the server, the input and output format, and a rough file size range (for example “1–5 MB”).
These events only increase daily totals in our database. We do not store IP addresses, device identifiers, file names or anything that identifies you, and we do not use cookies or similar technologies for these statistics. If your browser sends a Global Privacy Control or Do Not Track signal, no events are sent at all. Daily totals are kept for up to :days days.
Google Analytics
With your permission (“Statistics” in the privacy settings) we use Google Analytics, loaded through Cloudflare Zaraz, to understand how the tools are used and to find bugs. For each action – a file added, converted or downloaded, a failed conversion, a preset chosen, a result copied – it receives: the tool, the action, the file type (extension) and target format, the number of files, their total size, the number of pages, how long processing took, the page language and, for failures, a technical error code and the browser’s error message. File names, file contents, text from your files and links are never sent. Google Analytics also receives the usual information of a page visit (pages viewed, approximate location derived from the IP address, browser and device type).
Statistics and advertising are on by default; you can turn each of them off at any time in the privacy settings. When statistics are off, Google Analytics stores nothing on your device and Google receives only signals without identifiers (Google Consent Mode). Visitors in the European Economic Area, the United Kingdom and Switzerland see a notice with these choices on their first visit. To know whether to show it, your browser asks Cloudflare which country the connection comes from; the answer is kept only for the browser session and is not sent to us.
Your privacy choices
Your choice is stored only in your browser’s local storage (“uu-consent”) – not in a cookie and not on our server. Your browser’s Global Privacy Control signal always turns personalised ads off. You can change your choice at any time:
Server logs and abuse protection
Like almost every website, our web server records standard access logs (IP address, requested address, time, browser type and response status) to keep the service secure and to diagnose problems. These logs are deleted after 14 days.
To prevent abuse of server conversions, we limit how many conversions, how many at the same time and how much data one visitor can send per day. For this we store a keyed hash of the IP address with each server job (deleted together with the job) and keep short-lived counters that expire after at most one day.
Cookies
The public pages of UUTOOLS.NET do not set cookies of their own; your language is part of the page address. Google may store cookies or similar identifiers in your browser for statistics and advertising unless you turn them off in the privacy settings. The only first-party cookie is a session cookie used when site administrators sign in to the admin area.
If you switch between light and dark mode, the choice is saved only in your browser’s local storage on your device and is never sent to us. The same applies to the editor layout you choose (toolbar or side panel).
Advertising
The site does not currently show advertising. If we introduce advertising, this policy will be updated first and, where the law requires it, we will ask for your consent before any advertising cookies are used.
Who receives data
Our hosting provider operates the servers the site runs on and processes the data described above on our behalf. Cloudflare (which delivers the site and runs Zaraz) and, if you allow statistics, Google receive data as described in the Google Analytics section. We do not sell personal data.
Legal basis and your rights
Where data protection law such as the GDPR applies, we process server logs and abuse-protection data on the basis of our legitimate interest in running a secure, reliable service, and server-side conversions to perform the action you requested. You have the right to request access to, correction or deletion of personal data we hold about you, to object to processing, and to complain to your local data protection authority. You can delete a server conversion yourself at any time; because we do not store identifying information for usage statistics or file names, there is usually no other personal data we could retrieve.
To exercise these rights or ask about your data, email [email protected].
Children
The site is a general-audience service and does not knowingly collect personal information from children.
Changes
We will update this page whenever the way the site handles data changes, and update the date at the top.