Last Updated: July 28, 2026

1. Introduction

Z Tools ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at getztools.com. By using our services, you agree to the practices described in this policy. We are an independent, self-funded project with no investors and no parent company, which means our decisions are made solely based on user interests, not business metrics.

This policy was written to be clear and understandable. We avoid legal jargon wherever possible. If you have questions about any part of this policy, please contact us at [email protected].

2. Information We Do NOT Collect

We take a privacy-first approach. Most of our tools process data entirely within your browser using JavaScript. This means we never have access to the content you input into our tools, including:

  • Text content (passwords, JSON data, plain text)
  • Images opened by browser-only tools such as the QR scanner and Base64 converter
  • QR code content (generated and scanned locally)
  • Base64 encoded/decoded data
  • Markdown documents

For image compression only: Images are temporarily uploaded to our server for processing. They are stored with random filenames, automatically deleted after 5 minutes, and never accessible to other users or indexed by search engines. We do not retain copies, analyze the images, or share them with any third party.

3. Information We May Collect

Unlike most websites, we collect only the minimum data necessary to operate our service. Here's what we collect and why:

Server Access Logs

When you visit our website, our web server automatically records standard diagnostic information including:

  • Your IP address, truncated before it is written to the application statistics log
  • Browser type and version
  • Pages visited and timestamps
  • Referring website (if any)

This data is used only for security monitoring, debugging technical issues, and generating aggregate statistics (such as which pages are most popular). It is never shared with third parties and is automatically deleted after 180 days.

Session Cookies

Interactive tool pages use a session cookie named ztoolsid for CSRF protection, upload ownership, and abuse prevention. This cookie:

  • Is essential for CSRF token validation
  • Contains only a random session identifier, no personal data
  • Is automatically deleted when you close your browser
  • Is not used for tracking or advertising

We do not use any tracking cookies, analytics cookies, or advertising cookies.

Aggregate Usage Statistics

Z Tools records page views and explicit tool actions in a self-hosted statistics log. IPv4 addresses are truncated to /24 and IPv6 addresses to /48 before storage. Referrers are reduced to the hostname, and records expire after 180 days.

Cloudflare may also provide aggregate traffic and performance measurements when its Web Analytics beacon is enabled at the network edge. Z Tools does not use Google Analytics.

4. Third-Party Services

Advertising

Z Tools does not currently serve advertisements or set advertising cookies. If advertising is enabled later, this policy and the site's consent controls will be updated before ads are shown.

JavaScript Libraries

Tool libraries are served from the Z Tools domain rather than a public CDN. Examples include:

These libraries run in the browser and are loaded only on pages that use them.

5. Data Security

We implement reasonable technical and organizational measures to protect against unauthorized access, alteration, or destruction of data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

What we do: HTTPS encryption on all pages, strict security headers (HSTS, X-Frame-Options, CSP, X-Content-Type-Options), CSRF tokens for form submissions, input validation and sanitization, rate limiting to prevent abuse, automatic file deletion after 5 minutes.

What we don't do: We don't store passwords, don't log sensitive user input, don't share data with third parties, and don't use invasive tracking technologies.

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data:

  • Right to Access: You can request information about what data we collect (though our policy already describes this in full).
  • Right to Erasure: Since we don't store personal data, there's generally nothing to erase. Uploaded files are automatically deleted within 5 minutes.
  • Right to Object: You can object to non-essential processing by contacting us with the relevant request details.
  • Right to Portability: Not applicable — we don't hold personal data in a retrievable format.

To exercise any of these rights or ask questions about how we handle your data, please contact us at [email protected]. We will respond within 30 days.

7. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will delete any such information from our systems.

8. International Data Transfers

Our servers are located in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer.

Network and hosting providers may process connection data in the regions where they operate. The application itself minimizes stored identifiers as described above.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

For significant changes, we will provide more prominent notice (such as a banner on the homepage) at least 30 days before the changes take effect. What constitutes a "significant change" is at our sole discretion, but we always notify users of material reductions in privacy protections.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Website: https://getztools.com

We aim to respond to all inquiries within 1-2 business days. For security vulnerabilities, please contact us directly rather than posting publicly — we follow responsible disclosure practices and appreciate credit reports (unless you prefer anonymity).