Privacy policy

Who we are

CODDY Tool operates coddy-tool.com, a collection of free online utilities. For privacy questions, contact us at coddy.solution.kh@gmail.com.

The files and text you process

This is the part most people are actually asking about, so it comes first.

Nearly every tool on this site processes your data entirely inside your web browser. When you drop an image into the compressor or a PDF into the merge tool, the file is read from your device into your browser’s memory and processed there. It is not transmitted to us. We never receive it, never store it, and could not produce it if asked to.

The same applies to text. Anything you type or paste into the word counter, JSON formatter, case converter or any other text tool stays in your browser. It is not logged, not sent anywhere and not retained after you close the tab.

Each tool page states where its processing happens, in a notice directly beneath the description. Where a tool says your files are processed locally, that is a statement about how the tool is built, not a promise about how we behave — the file has nowhere to go. If a tool ever requires server-side processing, its page will say so explicitly, before you use it.

Because we never hold your files, we also cannot recover them. Please keep your originals.

Information collected automatically

Server logs

Like any website, our hosting provider records standard technical information when a page is requested: the IP address making the request, the page requested, the referring page, a timestamp and the browser’s user agent string. These logs exist to keep the site running securely and to detect abuse. They are retained for a short period and then deleted.

Analytics

We use privacy-conscious, aggregate analytics to understand which tools people use, so we know what to improve and what to build next. The events recorded are limited to things like “the image compressor page was opened” and “a compression job finished successfully”.

Deliberately not recorded: file names, file contents, the text entered into any tool, or any value derived from them. This is enforced in the code — analytics calls only accept a fixed set of non-identifying properties.

Search queries typed into the site’s own search box are recorded in aggregate so we can see what people look for and cannot find. Do not enter personal information into the search box.

Advertising

This site is free because it carries advertising. Advertising is supplied by third-party networks, and those networks may set cookies or use similar technologies in your browser to measure ad performance and, depending on your consent and your location, to personalise the ads you see.

We do not share the files or text you process with any advertising partner, because we do not have them. What an advertising partner can see is the standard information any embedded content receives: your IP address, your browser, and the page the ad appeared on.

Our cookie policy explains the specific categories of cookie involved and how to control them.

What we do not do

• We do not require or request an account, name or email address.
• We do not sell personal information.
• We do not build advertising profiles from the content you process.
• We do not use your files or text to train machine learning models.
• We do not send marketing email — we have no list to send it to.

Legal bases (UK and EU visitors)

Where the UK GDPR or EU GDPR applies, we rely on:

• Legitimate interests for security logging and aggregate analytics — a minimal, low-risk processing activity necessary to operate and improve the service.
• Consent for non-essential cookies, including advertising cookies, collected through the consent notice where one is required. You may withdraw consent at any time.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. Californian residents have rights under the CCPA/CPRA, including the right to know and to opt out of any sale or sharing of personal information — we do not sell or share personal information as those terms are defined.

In practice there is very little for us to act on: we hold no account, no profile and no copy of anything you have processed. If you would like to exercise a right, write to coddy.solution.kh@gmail.com and we will respond within the applicable statutory deadline.

Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them. Since no account or personal detail is required to use any tool, there is nothing for a child to submit to us.

Security

The site is served exclusively over HTTPS, with security headers including a content security policy, strict transport security and restrictive referrer and permissions policies. Because your files are processed locally, the most effective security measure of all applies: the data never leaves your device, so there is no store of it to breach.

International visitors

The site is served from a global content delivery network, so the page itself may be delivered from a server near you. Since your files stay on your device, using this site does not involve transferring your documents across borders.

Changes to this policy

If this policy changes materially — for example if a tool starts requiring server-side processing — we will update the date at the top and describe the change. Continued use after an update means you accept the revised policy.

Contact

Privacy questions and requests: coddy.solution.kh@gmail.com. General enquiries: our contact page.