Privacy Policy

Last updated: 8 September 2026

This policy explains what BoxTool collects, what it does not, and the choices you have. It covers boxtool.app and every tool hosted on it.

The short version

The tools run entirely inside your browser. Text you paste, files you drop, passwords you generate, and images you convert are processed on your own device and are never transmitted to our servers. We cannot see them, and we could not hand them over if asked. What we do collect is limited to ordinary web-server logs, cookie-less page-view counts, and the advertising data described below.

What your browser stores

Some features remember things locally so the site is useful on your next visit. This data stays in your browser's own storage, is never sent to us, and can be cleared at any time through your browser settings.

• Favourites and recently used tools — stored in your browser's localStorage so the quick-find panel can show them. These entries hold only tool names and links, never anything you entered into a tool.
• Tools that save your work — some tools (the to-do list, notes, expense tracker, budget planner, kanban board, flashcard maker, the local password manager, and others of that kind) keep what you enter in your browser's localStorage so it is still there on your next visit. That data never leaves your browser and is erased when you clear site data for boxtool.app.

BoxTool itself sets no cookies on its public pages. The only cookies involved are the advertising cookies described below.

What our servers record

Like nearly every website, our hosting produces access logs containing your IP address, browser user-agent, the page requested, and a timestamp. These are used to keep the site running, investigate errors, and detect abuse. They are not used to build a profile of you, are not sold, and are discarded on a rolling basis rather than kept indefinitely.

Analytics

Page views are counted with GoatCounter, a hosted analytics service. It records which page was viewed, the referring site, the browser and screen size, and a country derived from the IP address. It sets no cookies, does not track you across other websites, and does not build a profile of you. It tells us which pages are popular, not who visited them.

Advertising

This site is free to use and is funded by advertising. We use Google AdSense to display ads.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and other sites on the internet.
• You can opt out of personalised advertising by visiting Google's Ads Settings, and out of a third-party vendor's use of cookies for personalised advertising at optout.aboutads.info.
• Google explains what it collects and how it is used in How Google uses information from sites or apps that use our services.
• Personalised ads are served only where the law permits it. Visitors in the European Economic Area, the United Kingdom, and Switzerland will be asked for consent before any personalised ads are shown to them; until then, any ads shown in those regions are non-personalised.

Advertising, when shown, is served by Google AdSense and is separate from tool output. We do not accept payment to change what a tool outputs, and we do not place a product inside an article without saying so.

Third-party services we rely on

• Google AdSense — serves the advertising described above, under Google's own privacy policy.
• Google Fonts — the site's typefaces are loaded from Google's font service. Your browser fetches the font files from fonts.gstatic.com, so Google sees your IP address and browser details for that request. No cookies are set by this.
• GoatCounter — the page-view counting described above.
• Amazon Web Services — hosting, content delivery, and operational logging.
• Sentry — error monitoring, used to find crashes. Configured not to capture personal data.

These providers operate internationally, so the limited data described above may be processed outside your country.

Children

BoxTool is a general-audience utility site and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to object to it. Because we hold almost nothing that identifies you, most requests can be answered immediately. Write to us and we will respond within 30 days.

Changes to this policy

If this policy changes in a way that affects you, the date at the top of this page is updated and the change is described here rather than applied silently.

• 8 September 2026 — named the analytics and font services we use, linked the advertising opt-out pages, removed the language-preference cookie (the site is now English-only and no longer sets one), described the tools that keep your work in localStorage, and corrected the description of ad consent in the EEA, UK, and Switzerland.

Contact

Questions about privacy, or a request about your data, can be sent to haerule123@naver.com. BoxTool is built and run by one independent developer based in South Korea — the About page has more on who maintains the site and how the tools are checked.