Zero-Telemetry Specification

Privacy Policy & Architecture

All computations execute locally in your browser memory. User files, tokens, and input payloads are never sent to remote servers.

Strict Zero-StorageAir-Gapped CapableGDPR & CCPA Compliant by Architecture

We do not collect, log, store, analyze, or transmit your raw inputs, code snippets, API tokens, cryptographic private keys, passwords, documents, or PDF assets.

Every transformation, hash calculation, image optimization, or JSON inspection executes strictly within the browser thread via JavaScript engines, Web Workers, or sandboxed WebAssembly (Wasm). Processing is completed on your local device silicon before rendering directly back into your DOM.

01

Zero-Knowledge Client Architecture

Standard web utility platforms often transmit user inputs to remote microservices for processing (such as sending base64 strings to cloud servers or uploading PDF files to remote conversion queues). PrivaUtils operates under a zero-knowledge architectural model.

Hardware-Accelerated In-Browser IsolationClient Implementation
// Core cryptographic isolation guarantee:
async function digestLocalBuffer(plainString: string) {
  const encoder = new TextEncoder();
  const data = encoder.encode(plainString);
  
  // Hardware-accelerated inside client context without network invocation
  const hashBuffer = await window.crypto.subtle.digest('SHA-256', data);
  const hashArray = Array.from(new Uint8Array(hashBuffer));
  return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
}

All string manipulation, regex evaluation, CSS minification, image resizing, and cryptographic derivations execute within isolated browser threads. If you disconnect your internet connection while using PrivaUtils, the processing logic continues to function offline.

02

Edge Infrastructure & Network Logs

When your browser connects to privautils.com to retrieve static application files (HTML, CSS, JavaScript, and WebAssembly binaries), edge hosting infrastructure and Content Delivery Networks (such as Cloudflare and Vercel) automatically record standard network transport metadata.

Technical Network Metadata Logged at Edge:
  • Internet Protocol (IP) address (used for geolocation routing and DDoS mitigation, truncated or masked where supported)
  • HTTP request method, destination URL path, and request timestamp
  • Browser type, operating system version, and User-Agent string
  • Referring URL and HTTP response status code

These server logs are collected solely for cybersecurity monitoring, firewall rule enforcement, and content delivery optimization. They are maintained separately by edge hosting providers and contain zero tool inputs, files, code snippets, or processing results.

03

Local Browser Storage & Cookies

PrivaUtils does not use first-party tracking cookies, user session cookies, or server-synced profiles. Information saved on your device remains under your direct control:

Theme Preference

Stored in localStorage under privautils_theme. Holds solely your chosen visual mode (light, dark, or system).

Session Runtime State

Held in volatile sessionStorage. Completely erased the moment you close the browser tab or window.

Tool Settings

Non-sensitive options (such as indentation spaces or timestamp format choices) are stored locally in your browser storage and are never uploaded.

04

Third-Party Advertising & Cookies

PrivaUtils is offered free of charge without subscriptions or user registration. To support server infrastructure and continuous development, we display advertisements provided by third-party ad networks, including Google AdSense.

Third-Party Cookie Disclosures

Third-party vendors, including Google, use cookies to serve advertisements based on your prior visits to this website or other sites on the internet. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to PrivaUtils and other sites across the web.

You may opt out of personalized advertising by visiting Google Ads Settings or by visiting aboutads.info. You can also configure your browser to reject cookies or alert you when cookies are set.

Sandboxed Ad Frame Isolation

Ad scripts run inside sandboxed frames with restrictive permissions. They have no access to tool textareas, input files, DOM nodes, or local WebAssembly buffers.

05

Aggregated Metrics & Telemetry

PrivaUtils records privacy-respecting, aggregate metrics solely to detect edge outages, monitor static bundle delivery performance, and prioritize tool improvements.

Aggregate Metrics Collected:
  • Total page route views (for instance, the number of visits to a specific utility)
  • Static asset download response times and delivery errors
  • Zero user text input, zero document content, and zero keylogger recording

We do not use session recording or heatmap tools that capture keystrokes or mouse movements inside input elements.

06

Regulatory Rights (GDPR & CCPA)

Because PrivaUtils does not collect or ingest personal user data on servers, our architecture adheres to privacy regulations by design:

European Union & UK (GDPR)

Under Article 25 of the GDPR (Data Protection by Design and by Default), systems must protect user privacy automatically. Because your data never leaves your browser, rights of erasure, access, and rectification are fulfilled directly on your device. Clearing your browser cache and local storage immediately removes all stored preferences.

California Consumer Privacy Act (CCPA & CPRA)

PrivaUtils does not sell or share personal information as defined by California privacy laws. We do not provide financial incentives in exchange for personal data. We honor Global Privacy Control (GPC) signals broadcast by supported web browsers.

07

Children's Online Privacy Protection

PrivaUtils is designed for developers, technical professionals, and general audiences. We do not knowingly solicit, collect, or maintain personal information from children under the age of 13 (or under 16 in applicable European jurisdictions).

If a parent or legal guardian believes that a child has submitted personal details through our contact form, please notify us immediately. We will promptly delete that information from our communication records.

08

Independent Network Audit Protocol

You can verify our zero-egress architecture directly using your browser developer tools:

DevTools Network Verification Steps:
  1. Open Developer Tools (F12 or Cmd+Option+I)
  2. Navigate to the Network tab
  3. Paste input data or upload a file into any PrivaUtils tool
  4. Confirm that zero HTTP POST or PUT payloads are dispatched to any server
09

Security Lifecycle & Inquiries

PrivaUtils serves all web traffic strictly over encrypted HTTPS with TLS 1.3. Document streams, cryptographic keys, and hash inputs reside only in temporary memory heaps. Memory buffers are cleared when you navigate away from or close the tool.

Privacy & Security Inquiries

For questions regarding our privacy architecture or security practices, contact our team:

Contact Privacy Team