Security
Your data safety is our top priority. Here's how we protect you.
Client-Side Processing
The vast majority of our tools — JSON Formatter, Password Generator, Base64 Encoder, Image Compressor, Hash Generator, Word Counter, Regex Tester, Text Case Converter, and more — run entirely in your browser. Your data is never transmitted to any server. When you close the tab, the data is gone.
HTTPS Encryption
All connections to ToolBox are encrypted with TLS (HTTPS). This ensures that any data transmitted between your browser and our servers cannot be intercepted by third parties. We enforce HTTPS on all pages with HSTS headers.
No Data Storage
We do not store, log, or retain any data you process through our tools. We have no database of user-submitted content. Your text, files, passwords, and encoded data are processed in memory and discarded immediately.
Transparent API Usage
A small number of tools require external API calls to function. We clearly identify these tools:
- Currency Converter — fetches live exchange rates
- DNS Lookup — queries Cloudflare's DNS resolver
- IP Address Lookup — queries ip-api.com for geolocation
- URL Shortener — sends the URL to CleanURI API
For all other tools, zero data leaves your device.
Open Source Dependencies
We use well-maintained, actively audited open-source libraries including Next.js, React, and browser-image-compression. Our dependencies are pinned to specific versions and regularly updated to patch known vulnerabilities.
Report a Vulnerability
If you discover a security vulnerability, please report it responsibly via our contact page. We take all reports seriously and will respond within 48 hours.