Your files
stay local.

When you drop a file or type into a tool, the browser's File API reads it into the memory of this tab. The processing — compressing an image, merging PDFs, formatting JSON — happens on your device, and the result is handed back as a download or copied to your clipboard. Nothing is uploaded. UtilOrb has no API, no server code and no storage, so there is nowhere for your data to go.

You can verify this yourself: open your browser's developer tools, switch to the Network tab, and use any tool. The only requests are the site's own files loading — scripts, fonts and, for some PDF tools, Image to Text and Background Remover, the engine and data files they need — plus Google Analytics and, for Background Remover only, its AI model from Hugging Face, both described below. None of them carry your files or what you type into a tool.

UtilOrb itself keeps only four tiny values, and none of them are about your files:

• Theme (light or dark) — in localStorage, so the site doesn't flash the wrong theme next time.
• Sound on/off — in localStorage. This switches the UI sounds and the ambient music, which is generated live in your browser (no audio files are downloaded). Off by default: nothing plays until you turn it on.
• Cookie choice (accepted or declined) — in localStorage, so the cookie banner doesn't ask on every visit.
• Intro shown — in sessionStorage, so the loading animation plays once per visit. It's cleared when you close the tab.

Separately, a service worker keeps a copy of the site's own files — its pages, scripts, styles, fonts, icons and the engines some tools use, such as the PDF, OCR and AI engines — in your browser's Cache Storage, so pages you've visited also work offline and UtilOrb can be installed as an app. It only stores files that came from this site, never your files or anything you type. Clearing this site's data in your browser removes it.

Background Remover also keeps its AI model (about 115 MB, downloaded from Hugging Face) in Cache Storage, so it downloads only once rather than on every visit. That's the model file alone, never your photos or the cut-outs. Clearing this site's data in your browser removes it too.

Google Analytics sets its own cookies, but only if you accept them — see Cookies and your choice. Tool inputs, settings and history are never saved. Every tool starts fresh each time.

To see how many people visit and which tools get used, we use Google Analytics, a service provided by Google. For each page you open, it receives:

• the address and title of the page and the page that linked you here. In the tools directory the text in the search box is part of the address;
• your browser, operating system, device type, screen size and language;
• an approximate location (country, region and city), which Google works out from your IP address. Google Analytics doesn't log or store the IP address itself;
• when you visited, how long you stayed, and simple interactions such as scrolling and clicking a link to another site.

Until you accept cookies, and if you decline them, this arrives as a cookieless signal: no cookie is set and nothing links one page view to the next. Google may use these signals to estimate overall visitor numbers.

If you accept, Google Analytics also keeps a random visitor ID in a cookie, so a return visit counts as the same visitor, and we send a few events of our own:

• which tool you open, and when it finishes a task or you download or copy a result — the tool's name and category only;
• switching between the light and dark theme;
• the words you type into the tool search or the command palette, cut to 50 characters. Apart from the search box text that appears in the tools page's address, this is the only typed text that is sent.

Google Analytics never receives your files, their names, what you type into a tool, or any result. Those stay in your tab, as described above.

Visit-level data is deleted after the retention period set in our Google Analytics account (14 months at most), and we only look at totals and trends. Google processes this data under its privacy policy and may handle it on servers outside your country, including in the United States. How Google uses information from sites that use its services has the details.

On your first visit a banner asks whether we may use Google Analytics cookies. Accept and Decline carry the same weight, and every tool works exactly the same either way.

If you accept, Google Analytics sets two cookies: _ga and _ga_ followed by an ID. They hold a random identifier, not your name or email, and last up to two years. Accepting also turns on Google's advertising consent signals; with no ads on the site, nothing uses them today.

These are the only cookies on the site. Declining after you accepted deletes them. You can also clear this site's cookies in your browser settings, use a content blocker, or install Google's Analytics opt-out add-on, which also stops the cookieless signals.

To change your answer at any time, open Cookie settings — here, or in the site footer.

Two outside services are involved. Google Analytics, described above, measures visits. Hugging Face hosts the open-source AI model that Background Remover uses: the first time you use that tool, your browser downloads the model file from Hugging Face's servers (huggingface.co and its content delivery network on hf.co). Like any server that delivers a file, Hugging Face sees your IP address, the time and which file was requested. No cookies or referring page are sent with the request, and your photo is never part of it. Hugging Face handles this under its own privacy policy. No other tool contacts Hugging Face.

There are no ads, no advertising or social-media pixels and no fingerprinting, and we don't sell your data or share it with anyone else. Fonts, scripts and the engines that run the tools are served from the same place as the site.

If we add Google AdSense in the future to keep the tools free, Google and its partners would use cookies to show and measure ads, personalized only with your consent. We'll update this policy, and ask again where the law requires it, before any ad appears.

The site's Content Security Policy backs this up: it tells your browser to block any request from these pages to another server, apart from Google's analytics servers and Hugging Face's download servers, and to run scripts only from this site. A few tools show links to other websites — for example the links in your own Markdown — and those sites are only contacted if you open the link.

The site is a folder of static files. Like any web host, the provider serving those files may keep standard technical logs of requests (such as IP address, time and the page requested) to keep the service running. We don't add anything to those logs, and your files are never part of them because they're never sent.

UtilOrb never asks anyone, including children, for personal information. Google Analytics counts every visitor the same way and doesn't tell us who anyone is or how old they are.

If this policy changes, the date at the top changes too. Questions or a privacy request? Email hello@utilorb.com or see the contact page.