Privacy Policy
Last updated: 30 April 2026
Data controller
The data controller for Toolbox4Free under the GDPR is VANDEREIJT.COM. Company details are published on the operator's website, linked in the Imprint at the bottom of this page.
Files you process
Almost every Toolbox4Free tool runs entirely in your browser. Files you select — PDFs, images, text — are processed locally using JavaScript and Web APIs, and they are not uploaded to our servers or stored anywhere outside your device. The only exception is the four Office-format conversion tools described below, which clearly warn you with an amber notice on the tool page.
Server-side conversion tools
Producing a faithful Word, PowerPoint or PDF document from another office format requires a real document engine that doesn't fit in the browser. For that reason, the four tools PDF to Word, Word to PDF, PDF to PowerPoint and PowerPoint to PDF send your file to our server for conversion. Here is exactly what happens when you use them:
- Your file is uploaded over HTTPS and held in memory while a headless LibreOffice engine converts it. The maximum file size is 25 MB and each conversion is capped at 60 seconds.
- The original and the converted file are written to a private temporary directory on the server, used only to run the converter, and deleted as soon as the result is streamed back to you. A safety sweep also deletes any straggler files older than 10 minutes.
- We do not look at, store, share, sell or analyse the content of your files. They are not used to train any model and are not retained beyond the few seconds the conversion takes.
- To prevent abuse, we briefly keep a salted hash of your IP address in memory (the salt rotates daily and the hash never touches the database) so we can apply per-IP rate limits. The hash cannot be reversed to your IP address.
- Our standard server logs record the request method, path, status code and timing — the same as any other website. They do not include file contents or filenames.
If you would rather not upload a file at all, every other tool on the site (including Merge PDF, Split PDF, Compress PDF, image conversions and so on) runs fully in your browser.
Cookies & local storage
We store a small record in your browser's localStorage remembering your cookie choice (so we don't ask again), and your tool preferences (e.g. your last-used quality slider value). These never leave your device.
We use Google Consent Mode v2. By default, advertising and analytics cookies are denied. They are only enabled if you choose "Accept all" or opt in to specific categories from our cookie banner. You can change your mind at any time:
Analytics
When (and only when) you grant the Analytics category in the cookie banner, we record a tiny first-party pageview using our self-hosted counter, Toolbox4Free Analytics. Each pageview stores only the page path you visited (e.g. /merge-pdf/) and a server-side timestamp. No cookies are set, no IP addresses are stored, no fingerprinting is performed, and no third-party services receive any data. To prevent abuse and stop reload loops from inflating the counts, the server briefly keeps a salted hash of your IP in memory only (the salt rotates daily and the hash never touches the database). You can revoke Analytics consent at any time using the button above and we will stop sending pageviews on the spot.
Advertising
We may show advertisements served by Google AdSense. When you opt in, Google may set cookies to measure ad performance and personalise ads. See Google's policy for details. With ads denied, only non-personalised ads (if any) are shown.
Your rights (EU/UK)
Under the GDPR / UK GDPR you may withdraw consent at any time, and you have the right to object to processing. Because we don't collect or store personal data ourselves, most requests are fulfilled instantly by changing your cookie choice above. Email toolbox4free@vandereijt.com for anything else.
Contact
Questions? Email toolbox4free@vandereijt.com.