Security, honestly described.

Most security pages try to sound impressive. This one tries to be true. ToolHub does not have an account system, does not run a database, and does not receive your files, so the biggest attack surface most sites worry about simply does not exist here.

The short version

Every tool runs in your browser using JavaScript and, for images, the canvas API. Your files are read on your device and stay there. Nothing is uploaded to a server, nothing is stored, and nothing is kept after you close the tab. If I had a data breach, there would be nothing to steal.

What loads on your device

• The page itself, served over HTTPS.
• Fonts from Google Fonts and basic visit statistics from Google Analytics.
• Two open-source libraries, pinned to fixed versions, for PDF handling.

These come from third-party domains. They never receive your files, because your files never leave your browser. If browsing with maximal privacy matters to you, a content blocker can stop the analytics entirely without breaking the tools.

No account, no cookies for signing in

There is nothing to sign in to, so there are no account passwords to leak. Some third-party tags set ordinary analytics cookies; the tools themselves need no login and no profile.

Reporting a problem

If you spot something that looks off — a script that misbehaves, an odd third-party request, or anything that feels wrong — tell me through the contact page. I read everything and I fix what I can.

Last updated: August 2026