Privacy Policy

Overview

Here Be Tools ("we", "the site") is a free, browser-based developer toolbox at herebetools.com. Every tool runs entirely in your browser — no data you enter into any tool is sent to our servers or any third party. We have no accounts, no logins, and no server-side data storage.

This policy explains what limited data is collected, how it is used, and your rights under applicable law.

Data We Do Not Collect

• Content you paste, type, or upload into any tool — it never leaves your browser
• Account information — there are no accounts
• Passwords, tokens, keys, certificates, or any other credentials you work with in tools
• Form submissions or any user-generated content

All cryptographic operations (hashing, JWT signing, PEM decoding, password generation) use the browser's built-in Web Crypto API and run locally.

Data We Do Collect

Analytics preferences

Analytics are enabled by default. Unless you disable analytics in Cookie Preferences, we load Google Tag Manager, Google Analytics, Microsoft Clarity, and Ahrefs Analytics to understand site usage. These scripts are deferred until after the page loads and the browser has idle time.

Google Tag Manager and Ahrefs Analytics

Google Tag Manager manages configured tracking tags. Ahrefs Analytics measures visits and referral sources. These integrations use the same analytics preference as the services below.

Google Analytics 4 (Google LLC)

Google Analytics collects anonymised usage data including pages visited, session duration, browser type, device type, and approximate country. It sets cookies (_ga, _gid, _ga_*) that persist for up to 2 years.

Google acts as a data processor under our instructions. Data may be transferred to and processed in the United States. Google is certified under the EU–US Data Privacy Framework. See Google's Privacy Policy.

Microsoft Clarity (Microsoft Corporation)

Microsoft Clarity records anonymised session replays and heatmaps to help us identify usability issues. It uses cookies and browser storage. Data is retained for up to 13 months.

See Microsoft's Privacy Statement.

None of these analytics integrations are loaded unless you explicitly accept analytics cookies. Declining has no effect on tool functionality.

Hosting & Server Logs

The site is hosted on Cloudflare Workers. Cloudflare may log standard web server data (IP address, request path, timestamp, HTTP status code) for security and abuse-prevention purposes. These logs are not controlled by us and are subject to Cloudflare's Privacy Policy. Logs are typically retained for a short period and are not used for profiling.

Local Storage

We store four items in your browser's localStorage:

• hbt_consent — your analytics cookie preference (accepted or declined). Stored locally only; never sent to a server.
• hbt-favorites — IDs of tools you save as favorites. No tool input or output is stored.
• hbt-recent — IDs of up to six recently opened tools. No tool input or output is stored.
• ts-theme — your light/dark theme preference. Stored locally only.

You can clear these at any time by clearing your browser's site data, or by using the preference controls below.

Cookies

No essential or functional cookies are set by this site. All cookies listed above are analytics-only and may be set while analytics are enabled.

Cookie Preferences

You can change your analytics preference at any time:

Disabling analytics saves your preference and reloads the page to stop loaded analytics scripts. Existing disabled preferences remain respected.

Your Rights

European Union / EEA — GDPR

Under the General Data Protection Regulation (GDPR), if you are located in the EU or EEA, you have the right to:

• Access — request a copy of personal data held about you
• Rectification — correct inaccurate data
• Erasure — request deletion of personal data ("right to be forgotten")
• Restriction — request we limit processing of your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — withdraw analytics consent at any time using the controls above

Because we hold no personal data ourselves (all tool data is client-side only), most data requests should be directed to Google or Microsoft using the links above.

You have the right to lodge a complaint with your national data protection authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany).

United Kingdom — UK GDPR

The same rights as GDPR apply under the UK GDPR and Data Protection Act 2018. You may complain to the Information Commissioner's Office (ICO).

California, USA — CCPA / CPRA

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:

• Know what personal information is collected and how it is used
• Delete personal information we hold
• Opt out of the "sale" or "sharing" of personal information
• Non-discrimination for exercising your rights

We do not sell personal information. Analytics data (anonymised usage data) may be shared with Google and Microsoft as described above. You can opt out by declining analytics using the controls above. We do not knowingly collect data from users under 16.

Canada — PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canadian residents may access or correct personal information we hold. Because we hold no personal data ourselves (analytics are handled by Google and Microsoft), please contact those providers directly.

Brazil — LGPD

Under the Lei Geral de Proteção de Dados Pessoais (LGPD), Brazilian residents have rights equivalent to those described under GDPR above, including the right to access, correct, delete, and portability of personal data. Analytics consent can be withdrawn using the controls above.

Australia — Privacy Act 1988

Under the Australian Privacy Act and Australian Privacy Principles (APPs), Australian residents may request access to or correction of personal information we hold. As we hold no personal data ourselves, requests should be directed to Google or Microsoft.

Other Jurisdictions

We aim to respect the privacy rights of all users regardless of location. If your country has specific privacy laws not covered above, the consent controls and opt-out mechanisms above are available to all users.

Children's Privacy

This site is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us.

Changes to This Policy

We may update this policy from time to time. Changes will be posted here with an updated date. Continued use of the site after changes constitutes acceptance of the new policy.

Contact

For privacy-related questions or requests, contact us at: privacy@herebetools.com