Privacy at HashyTools

What data we process

• No HashyTools account or login is required. Hosting requests expose ordinary connection information such as IP address, requested URL and browser headers to the hosting infrastructure; these may appear in server logs.
• Your tool inputs—such as text, files, passwords, tokens, and JSON payloads—are handled in the browser runtime and are not sent to HashyTools servers.
• We store only language, theme and optional-service consent preferences in localStorage. Clear your browser storage to remove them.

Local-only processing

• Cryptographic tools use Web Crypto or bundled libraries; file hashing uses a Web Worker. Local transformations work after their required code has loaded.
• QR and barcode generators draw directly on the canvas and export assets without uploads.
• JSON, regex, and text utilities run purely in JavaScript—no remote validation services.

HashyTools does not save tool inputs as account data. Downloads, clipboard history and browser form restoration can retain copies on your device; refreshing the page is not a secure-erasure guarantee.

External IP lookup services

The IP page makes no detection or location request until you click its lookup button. That action may contact ipify.org, icanhazip.com, ifconfig.me or checkip.amazonaws.com to detect your public IP. It may then send that IP to ipapi.co, ipwho.is or ipinfo.io for approximate location and provider details. Fallback providers are tried if an earlier request fails.

These providers receive your public IP and ordinary request headers and operate under their own policies. Do not start the lookup if you do not want these requests. No browser GPS permission is requested.

The URL encoder and inspector do not contact URL-shortening services or visit the supplied address.

Analytics and advertising

Google Analytics 4 and Google AdSense are optional. When enabled on the site, neither service is requested until you explicitly allow optional services.

Consent starts denied for every visitor. If you reject it, analytics and advertising stay off. If you allow it, analytics may record page views and the tool event names tool_run, copy_result, download_result, validation_error and language_change, with limited fields such as tool, algorithm, action and status. Google services also receive connection and device information when loaded.

HashyTools never sends entered text, files, passwords, hashes, tokens, cryptographic payloads or generated results as analytics values. When configured, the site renders one footer ad slot; Google may process device and interaction information under its own policies after consent.

Review Google's Privacy Policy and how Google uses information for advertising.

You can block these services entirely with browser-level content blockers. HashyTools continues working because every tool is client-side.

Your rights and controls

• Clear browser storage to remove saved preferences instantly.
• Use private browsing modes if you prefer sessions without persistent data.
• Use the consent message controls, browser privacy settings, or content blockers to limit advertising storage and requests.

Contact and updates

Questions, security reports, or data inquiries? Email contact@hashytools.com.

We update this policy when new tools, advertising options, or regulations require it. Updated: September 21, 2026.