--- title: "Privacy Policy | ToolSugar" description: "What ToolSugar collects, what stays on your device, which analytics we use, how cookies work, and how to opt out. No ads, and we never sell personal data." canonical: https://toolsugar.com/privacy image: https://toolsugar.com/og.png --- # Privacy Policy Last updated 2026-11-09 This page explains what happens to your files and data when you use ToolSugar. It covers the website and the small server behind it. ## The short version - There are no accounts, and we do not sell your personal data. - Tools labelled "Runs on your device" keep your file and text in your browser. Our servers and our analytics never receive them. - We use Google Analytics, Microsoft Clarity and our own DataBull analytics to see how the site is used, and these set cookies. - ToolSugar shows no ads and uses no advertising cookies. - Free AI tools count your runs with a hash of your browser traits and a hash of your IP address. We keep those counts for 24 hours. ## Who we are ToolSugar is run by Kartik Labhshetwar, who is responsible for the data described here. You can reach us through the [contact page](https://toolsugar.com/contact). ## Tools that run on your device These tools process your file inside your browser tab, and this includes every AI tool. The file stays in the memory of that tab, and closing the tab clears the working copy. Our servers never receive it, and neither does any AI service or analytics service. We mark the tool area of every page as masked, so session recordings do not capture the text or results you work with there. ## Analytics We use analytics to learn which pages and tools people use, find broken pages and improve the site. These services collect details such as the pages you visit, the page that sent you, your approximate location from your IP address, your browser, device and screen size, and how long you stay. They identify a returning browser with a random ID stored in a cookie, not with your name or email address. - **Google Analytics**, loaded through Google Tag Manager, records page views and actions such as scrolls, outbound link clicks and downloads. Google handles this data under the [Google Privacy Policy](https://policies.google.com/privacy), and [explains how it uses data from sites that use its services](https://policies.google.com/technologies/partner-sites). You can opt out with the [Google Analytics opt-out browser add-on](https://tools.google.com/dlpage/gaoptout). - **Microsoft Clarity** records how people move, click and scroll on a page, as heatmaps and session replays, so we can spot confusing layouts. Microsoft and Bing collect this usage data with cookies and similar technology, under the [Microsoft Privacy Statement](https://www.microsoft.com/privacy/privacystatement). Clarity masks what you type in form fields, and we mask the whole tool area as well. - **DataBull** is our own lightweight analytics, hosted on Cloudflare. It counts page views, visits and the referring site. It skips known bots and keeps a visitor ID and a session ID in first-party cookies. We use analytics data only in summary form and do not try to identify individual people. ## Limits on free AI tools Free AI tools share 5 runs in any 24 hours. When you start a run, your browser builds a hash from traits such as its user agent, language, time zone, screen size, processor count, and how it draws a test image. It sends that hash to our server with a Cloudflare Turnstile token. The hash cannot be turned back into those traits, but it can still recognize a browser, so we do not describe it as anonymous. Our server hashes that value together with your IP address and a secret key, so identical devices on different networks do not share a count. It also hashes your IP address alone with the secret key, for a larger limit that covers a whole network. Under each keyed hash we store only the times of your recent runs. Those times are deleted automatically 24 hours after the last run. The raw IP address is not stored in these counts, and your files and text are never part of them. We use this to keep free tools free and for no other purpose. Turnstile checks that a run comes from a real browser, and a Cloudflare rate limit counts requests per IP address for one minute to stop floods. Cloudflare handles both under the policy linked below. An earlier version of the site kept one row per visitor per day for AI server tools, with the date, a running cost total and a daily hash of the IP address, plus a total for the whole site. We no longer add these rows, and we are deleting the ones that remain. ## Server logs and hosting Cloudflare hosts the website and our server, and it sees your IP address and normal request details when your browser connects. Our server also logs the method and path of each request it handles. Cloudflare handles that data under [its own privacy policy](https://www.cloudflare.com/privacypolicy/). ## What Is My IP When you open this tool, our server reads your IP address and country from the Cloudflare request headers and shows them back to you. It marks the response as not to be cached, and it does not store either value. ## Downloads from other services Some on-device tools download an engine or AI model the first time you use them. jsDelivr, Hugging Face or our own Cloudflare storage supply these downloads and receive your IP address and normal request details. They never receive your files. YouTube Thumbnail Downloader loads images from img.youtube.com, so YouTube receives the video ID you enter and your IP address. ## Cookies and browser storage These are the cookies and storage the site uses, and you can clear them in your browser: - **Needed for the site:** a cookie named sidebar_state remembers the sidebar position for 7 days, local storage remembers your theme choice, and the browser cache keeps downloaded engines and models for next time. - **Google Analytics:** \_ga and \_ga\_ tell visits from the same browser apart, for up to 2 years. - **Microsoft Clarity:** \_clck and \_clsk link page views from the same browser, for up to a year and for one day. Microsoft may also set MUID on its own domains. - **DataBull:** cookies starting with datacheap\_ hold a random visitor ID, a session ID and a visit count, for up to a year. You can block or delete cookies in your browser settings. The tools keep working if you block analytics cookies. ## How long we keep data - Free AI run counts are deleted 24 hours after the last run. - Google Analytics keeps event data for up to 14 months. - Microsoft Clarity keeps recordings for a short period, normally 30 days, and summary data for longer, under Microsoft's retention rules. - Emails you send us are kept as long as needed to answer you. ## No accounts or payments ToolSugar has no sign up and takes no payments, so we do not ask for your name, email address, password or card details. If you email us, we receive your address and message through Google's Gmail and use them only to reply. ## Children ToolSugar is not aimed at children under 13, and we do not knowingly collect their personal data. ## Your rights and choices Depending on where you live, including the European Economic Area, the United Kingdom and California, you may have the right to access, correct or delete personal data about you, and to object to or limit how it is used. To make a request, use the [contact page](https://toolsugar.com/contact). We do not sell personal data for money. We will not treat you differently for using these rights. We rely on our legitimate interest in running, protecting and improving a free website for hosting, security and the run counter, and on your consent where the law requires it for analytics cookies. You can withdraw consent by clearing or blocking cookies and with the opt-out links above. Because analytics and run counts are tied to random IDs and keyed hashes, not to a name or email address, we usually cannot find a record that belongs to you. Clearing site data in your browser resets those IDs. Google, Microsoft and Cloudflare may process data outside your country, including in the United States, under the safeguards described in their own policies. ## Changes to this policy We update this page when the way ToolSugar handles data changes, and we change the date at the top when we do. ## Contact For questions about this policy, use the [contact page](https://toolsugar.com/contact).