Privacy at HashyTools

HashyTools processes text, files and cryptographic inputs in your browser. Visiting the website still makes network requests, and the optional IP lookup contacts external providers as described below.

What data we process

No HashyTools account or login is required. Hosting requests expose ordinary connection information such as IP address, requested URL and browser headers to the hosting infrastructure; these may appear in server logs.
Your tool inputs—such as text, files, passwords, tokens, and JSON payloads—are handled in the browser runtime and are not sent to HashyTools servers.
We store your theme preference and the fixed English language setting in localStorage. Older optional-service choices may remain in your browser but are ignored in this release. Passwords, keys, tokens, files and tool results are not saved in browser storage.

Local-only processing

Cryptographic tools use Web Crypto or bundled libraries; file hashing uses a Web Worker. Local transformations work after their required code has loaded.
QR and barcode generators draw directly on the canvas and export assets without uploads.
JSON, regex, and text utilities run purely in JavaScript—no remote validation services.

HashyTools does not save tool inputs as account data. Downloads, clipboard history and browser form restoration can retain copies on your device; refreshing the page is not a secure-erasure guarantee.

External IP lookup services

The IP page makes no detection or location request until you click its lookup button. That action may contact ipify.org, icanhazip.com, ifconfig.me or checkip.amazonaws.com to detect your public IP. It may then send that IP to ipapi.co, ipwho.is or ipinfo.io for approximate location and provider details. Fallback providers are tried if an earlier request fails.

These providers receive your public IP and ordinary request headers and operate under their own policies. Do not start the lookup if you do not want these requests. No browser GPS permission is requested.

The URL encoder and inspector do not contact URL-shortening services or visit the supplied address.

Analytics and advertising

HashyTools uses Bidvertiser native advertising on tool and guide pages: above and below the complete tool, near the end of explanatory content, and in a separate side column only on wide screens with enough space. The side column is not loaded on narrow screens. Advertising never overlays the tool or appears between its inputs and results. The supplied loader is served from cdn.hyperpromote.com. Advertising partners may receive your IP address, browser and device information and use cookies or similar identifiers to display and measure advertisements. Google Analytics, AdSense and Adsterra are not loaded by this release.

Advertising loads automatically by default. In regions configured for prior consent, the advertising tag waits for acceptance. Regions configured for opt-out provide advertising privacy controls without requiring prior acceptance. Saved rejection and supported Global Privacy Control signals are honored where these controls apply. Tool inputs and results are not sent to advertising or analytics services; the advertising tag runs inside an isolated frame.

Regional advertising rules

The server uses a local copy of the public-domain IPtoASN country dataset to estimate country from the connection IP address. This lookup does not send your IP to the dataset provider, request GPS access, or store the IP in a separate advertising preference record. IP-based country estimates can be incorrect, especially with VPNs and proxies. If the country cannot be determined, the default advertising policy applies.

Advertising choices are stored locally with their version and decision date for up to 180 days. Clearing browser storage removes that preference. Advertising partners operate under their own policies: Bidvertiser privacy policy.

Optional tips

Our support section and footer may link to our Ko-fi page. This is a normal external link: no Ko-fi widget, image, payment panel or script is loaded by HashyTools. Ko-fi opens in a separate tab only when you select the link, without sending a referrer. Ko-fi and its payment providers handle their own payment flow and data collection; this website does not collect payment fields. Tips are voluntary and have no effect on the tools.

Your rights and controls

Clear browser storage to remove saved preferences instantly.
Where advertising controls apply, use the advertising privacy link to reject advertising or withdraw consent without losing tool inputs. Choices expire after 180 days. Previous Adsterra or Google choices do not grant Bidvertiser consent.
Use private browsing modes if you prefer sessions without persistent data.
Use browser privacy settings to control storage and form restoration.

Contact and updates

Questions, security reports, or data inquiries? Email contact@hashytools.com.

We update this policy when new tools, advertising options, or regulations require it. Updated: October 28, 2026.

Privacy FAQ

Does HashyTools send my inputs to a server?

Text, files, passwords and tokens are processed locally. IP lookup contacts external providers after you request it. Ordinary hosting requests are described above; advertising runs separately in an isolated frame and analytics is disabled.

Does HashyTools use advertising cookies?

Advertising partners may use cookies and similar identifiers. Regional advertising controls determine whether the tag loads automatically or requires prior acceptance. Analytics is disabled.

What local storage does the site use?

Your theme preference and the fixed English language setting. Old advertising or analytics choices may remain but are ignored. Clear localStorage to remove saved preferences.

How can I contact HashyTools about privacy?

Email contact@hashytools.com. Include the relevant page and a description without sending secrets.

How can I remove local copies?

Clear site storage for saved preferences. Also review browser form history, downloaded files and clipboard history; refreshing alone does not securely erase those copies. Contact us for privacy questions about the website.

Choose a developer tool

AES-GCM encrypt/decrypt
Protect text with AES-GCM and PBKDF2 tokens that stay on-device.
Hash generator
Generate MD5, SHA-1, and SHA-256 digests locally with Web Workers.
Base64 encoder & decoder
Convert any text to or from Base64 without leaving your browser.
JWT verifier
Decode claims and verify HMAC signatures without network calls.
JSON formatter
Validate, format, and diff JSON without network calls.

More tools for data, text and testing

XML formatter
Format, minify and convert XML to JSON locally.
Regex tester
Experiment with regular expressions and capture groups locally.
URL encoder and inspector
Encode components and inspect query parameters locally.
UUID v4 generator
Create collision-resistant UUID v4 identifiers using Web Crypto.
Secure password generator
Build strong passwords with custom length, charset, and entropy.
Epoch time converter
Convert Unix timestamps into local, UTC and ISO dates.
Text transformer
Convert case, slugify, and clean strings on-device.
Color converter
Switch between HEX, RGB, HSL, and Tailwind palettes instantly.
QR code builder
Design QR codes for text, Wi-Fi, contacts, email, or SMS locally.
Barcode maker
Generate EAN and Code 128 barcodes and download crisp PNG output.
IP lookup
Look up your public IP using disclosed external services.
Lorem ipsum generator
Produce paragraphs, lists, and markdown filler text fast.

Image compressor
Compress JPG, PNG, WebP and AVIF images to a target size in your browser. Preview results, process batches and download images individually or as a ZIP.
Image converter
Convert WebP and AVIF images to JPG or PNG locally. Batch convert supported images, control quality and transparency, preview results and download a ZIP.
JSON ↔ CSV
Convert JSON and NDJSON to CSV for Excel, or CSV to JSON, locally. Flatten nested objects, choose columns and delimiters, and download UTF-8 results.
Base64 ↔ image
Decode Base64 or data URIs to an image preview and download, or encode an image file to Base64. Inspect dimensions and size without uploading your image.
HEIC → JPG
Convert HEIC and HEIF photos to JPG or PNG in your browser. Choose quality, preview converted images and download individual photos or a batch ZIP.
Base64 → PDF
Decode Base64 to PDF locally, preview pages with zoom and navigation, and download the decoded PDF. Supports raw Base64 and application/pdf data URIs.

Run the AES interoperability guide or read how these tools are checked.