Privacy Policy
Last updated: 1 November 2026
Your privacy matters. This policy explains what information Handy Online Tools collects (very little), how it is used, and what choices you have.
Your consent choices
On your first visit we ask you once whether analytics may use storage on your device. Until you answer, analytics is treated as refused.
- Strictly necessary — your colour theme, your consent choice itself, and any pages you ask us to keep for offline use. Always on; the site cannot work without them.
- Analytics — counts page views so we know which tools are worth improving. The analytics tag is not loaded until you accept this.
We pass your answer to Google as Google Consent Mode v2 signals. Advertising signals (ad_storage, ad_user_data,ad_personalization) are always set to deniedby our site; Google’s own certified consent message collects your advertising preference and controls whether ads are shown and advertising cookies are set.
You can change your answer at any time with the Cookie settings link in the footer.
Data you enter into tools
We collect no data from the tools themselves. Almost every calculator, converter, image tool, and generator on this site runs entirely inside your browser. The numbers, text, and files you enter are processed locally and are never transmitted to our servers. The few tools that need a server are listed in the Tools that run on our server section below.
Tools that run on our server
A few tools, such as Office to PDF, cannot run inside your browser. For these, your file is sent over an encrypted connection to our server in Germany (EU), converted in memory, and the result is sent straight back to you. We do not store your file or the converted result, we do not open or inspect their contents, we do not share them with anyone, and we do not log file names. Temporary working data exists only while your request is being processed and is discarded as soon as the response is sent. We keep only technical records of the request itself (a random request id, the file type, a size range, how long it took, and whether it succeeded) for up to 30 days to operate the service. The What is my IP page asks our server which address your request came from and shows it back to you; we do not store or log that address.
Page-view analytics
We use Google Analytics to count anonymous page views. This helps us understand which tools are useful and where to focus our work. The tag is not loaded until you agree to it. Until you answer the consent banner, and if you decline, no analytics request leaves your browser.
If you do agree, our configuration is:
- Google Analytics sets a first-party cookie named
_gato recognize your browser on later visits. This lets us count sessions and returning readers. anonymize_ip: true— your IP address is truncated by Google before storage.- No user identifiers, no cross-site tracking, no advertising.
- When you convert or compress an image, we record that it happened: the input and output formats, a rough file size, a rough time and, for the compressor, a rough measure of how much smaller the file got. We never record your files, file names or exact sizes.
Use of Google’s service is governed by Google’s Privacy Policy. You can change your mind at any time through Cookie settings in the footer.
Frontend observability
We use New Relic Browser to collect anonymous performance metrics, JavaScript errors, and pathname-only page-view counts. This helps us keep the site fast and reliable.
Our New Relic Browser configuration:
- Cookies, persistent browser sessions, session traces, and session replay are disabled.
- Browser console capture and manual browser logs are disabled.
- Page metadata contains only the pathname; query strings are removed before transmission.
- No user identifiers or custom user data are sent.
- New Relic may process provider-derived device, browser, IP address, and network fields needed to deliver telemetry.
Use of New Relic is governed by New Relic’s Terms and Conditions.
Advertising
Google AdSenseplaces and measures the ads that pay for the site. The AdSense script loads on every page in production, but Google’s own certified consent message controls whether advertising cookies are set and whether ads are shown.
Until you answer Google’s message, no advertising cookies are set and no ads are shown. If you withdraw consent via our Cookie settings, Google will stop serving ads to your browser.
You can reopen Google’s consent message at any time by clicking the Cookie settings link in the footer, then selecting the advertising preferences option.
Cookies and local storage
Unless you answer Google’s advertising consent message, we use first-party storage only. The site stores the following on your device:
- Consent cookie — a first-party cookie named
hot-consentholding your answer to the analytics category. It lasts 180 days and contains nothing else. - Theme cookie — a first-party cookie remembering your selected color theme, so the server can render the correct theme on first paint.
- Theme in localStorage — the same theme preference, mirrored client-side for instant switching.
- Service worker cache — pages and assets you opt to cache for offline use via the offline settings.
None of these contain personal information. You can clear them at any time using your browser’s site-data controls.
If you answer Google’s advertising consent message, Google additionally sets its own advertising cookies. Refusing to answer, or simply declining advertising, means Google’s advertising scripts may still load but will not set advertising cookies or show ads.
Third-party services
Typefaces are bundled with the site and served from our own domain; nothing is requested from Google Fonts. The site loads resources from these third parties:
- Google Analytics — see the section above.
- Google AdSense— places and measures the ads that pay for the site. See the “Advertising” section above.
- New Relic— anonymous frontend observability metrics sent to New Relic’s EU region; see the “Frontend observability” section above.
- Google Forms — embedded on the contact page. Submitting a form sends the data you typed to Google’s servers under their privacy policy.
Your rights
Because we hold no personal data about you on our own servers, there is nothing on our side to access, correct, export, or delete. To remove locally stored preferences, clear site data for this domain in your browser. To remove data you submitted via a Google Form, contact us through that same form and we will delete the submission. To withdraw or change your consent, use the Cookie settings link in the footer.
Children's privacy
This site is not directed at children under 13. We do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date at the top of this page. Continued use of the site after changes are published constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy? Get in touch.