Your Privacy Matters
We believe in transparency. This policy explains how Nutter Tools collects, uses, and protects your information across all our platforms.
1. Introduction
Welcome to Nutter Tools. We are committed to protecting your privacy and ensuring you have a positive experience using our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application on web, iOS, Android, and desktop platforms.
By using Nutter Tools, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
This policy applies to information we collect through our applications, websites, and any related services, sales, marketing, or events.
2. Information We Collect
We collect information that you provide directly to us, as well as some information automatically when you use our services.
Account Information
None. There is no account system: no sign-up, no email address, no password. Every tool works without an account, so there is no account information to collect.
- No email addresses
- No passwords
- No profiles or preferences
Device Information
Analytics records coarse device information so we can see which browsers and screen sizes need work. It is not used to identify you.
- Device type
- Operating system and browser version
- Screen resolution
Usage Analytics
We use Google Analytics through Firebase on every page. It records page views, error events, and conversion performance so we can improve the tools. There are no ads and no ad networks.
- Page views, error events, and performance timing
- On conversions: tool used, formats, browser version, timing
- Never file contents: conversion happens in your browser and files are never uploaded
Location Data
We do not collect location data. Timezone information is read locally by your browser for the time tools and never sent anywhere.
- Timezone (read locally by your browser, never transmitted)
3. Information We Don't Collect
Privacy is the point of Nutter Tools. Here is what we deliberately do not collect:
Your Files & Content
All file processing (images, videos, audio) happens entirely on your device. We never upload, store, or access the content of your files.
Financial Information
None. Nothing on the site is for sale: there is no checkout, no payment processor, and no payment details of any kind are collected.
Private Communications
We do not access, read, or store any private messages, emails, or personal communications.
Browsing History
We do not track your browsing history outside of our application. What you do elsewhere is none of our business.
Client-Side Processing Promise
All file conversions, compressions, and transformations happen entirely on your device. Your files are never uploaded to our servers. That is a fundamental design principle of Nutter Tools.
The exception: network tools
A small, closed set of tools is different by design: it sends requests from your browser, only when you press the button, never on load. These are the only tools with any network behavior. Everything else makes no requests at all once the page has loaded.
Each of those pages carries a persistent disclosure naming the destinations it can reach: public DNS/RDAP/IP-echo endpoints, servers you name yourself, or this project's own fetch proxy. They need a connection. The site's Google Analytics measurement still runs on these pages, but it records only the visit: your files and lookups are never uploaded to it.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and maintain our services: To deliver the features and functionality you expect from our application.
- Improve our services: To understand how users interact with our app and identify areas for improvement.
- Communicate with you: To send important updates, security alerts, and support messages.
- Process transactions: None. The site processes no payments and sells nothing.
- Detect and prevent issues: To identify bugs, security threats, and fraudulent activity.
- Legal compliance: To comply with applicable laws, regulations, and legal processes.
5. Third-Party Services
There is no advertising and no ad network. One measurement service runs on every page: Google Analytics, provided through Firebase. It sees page views, error events, and performance traces, never the contents of your files. A notice on first visit explains this and records your acceptance locally.
Analytics Disclosure
This site measures usage and conversion performance with Google Analytics (Firebase). The measurement collects page views, error events, and performance traces of conversions (tool, formats, browser version, timing). Conversion still happens entirely in the visitor's browser and files are never uploaded, so the measurement never sees file contents.
6. Data Sharing & Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Legal requirements: When required by law, subpoena, or other legal process, or to protect our rights, privacy, safety, or property.
- Service providers: With third-party vendors who assist us in operating our services, subject to confidentiality agreements.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the new owner.
- With your consent: When you explicitly agree to share your information for a specific purpose.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
You can request a copy of all personal data we hold about you. We will provide this within 30 days.
Right to Rectification
You can ask us to correct any personal information we hold about you (for example, your email address in support correspondence) by contacting us.
Right to Deletion
You can request deletion of any personal data we hold about you. Without accounts, that means your email correspondence with us. The analytics events described under "Usage Analytics" carry no name or email address to delete. See "Data Deletion" below.
Right to Restrict Processing
You can request that we limit how we use the personal data we hold about you.
Right to Data Portability
You can request your data in a machine-readable format to transfer to another service.
Right to Object
You can object to processing of your data for marketing purposes or based on legitimate interests.
To exercise any of these rights, please contact us at hmziqrs@gmail.com. We will respond to your request within 30 days.
8. Data Deletion
Your right to be forgotten
You have the right to request deletion of your personal data at any time. Here's how to request data deletion:
How to Request Data Deletion
- By Email: Send a request to hmziqrs@gmail.com with subject "Data Deletion Request" from the address you wrote to us from.
What Gets Deleted
- Your email address from our correspondence
- The content of your emails to us
- Nothing else. There are no accounts or payment records, and the analytics events hold no name, email, or file content
Deletion Timeline
- Immediate: The correspondence thread is closed and no new data is accepted from it.
- Within 30 days: All personal data is permanently deleted from our active systems.
- Within 90 days: Data is purged from backup systems.
Note: Some data may be retained for legal compliance, fraud prevention, or dispute resolution as permitted by law. This will be anonymized where possible.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy:
- Account data: None collected. There is no account system.
- Usage analytics: Collected by Google Analytics and retained under its standard retention settings.
- Transaction records: None. No payments are processed.
- Support communications: Retained for 2 years to provide context for future support requests.
10. Security Measures
We implement industry-standard security measures to protect your data:
Encryption
All data in transit is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256.
Access Controls
Strict access controls ensure only authorized personnel can access user data, with full audit logging.
Secure Infrastructure
We use major cloud providers with SOC 2 Type II certification and regular security audits.
Regular Audits
We conduct regular security assessments and penetration testing to identify and address vulnerabilities.
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing best practices.
11. Children's Privacy
Nutter Tools is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hmziqrs@gmail.com. We will take steps to delete such information from our systems.
If we discover that we have collected personal information from a child without parental consent, we will delete that information as quickly as possible.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
When we transfer data internationally, we ensure appropriate safeguards are in place:
- • Standard Contractual Clauses approved by the European Commission
- • Data Processing Agreements with all third-party providers
- • Compliance with GDPR for European users
- • Compliance with CCPA for California residents
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- • Posting the new Privacy Policy on this page
- • Updating the "Last Updated" date at the top
- • Sending an email notification for material changes
- • Displaying an in-app notification
We encourage you to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.
15. Contact Us
Questions about this privacy policy?
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
For data deletion requests or exercising your privacy rights, please include your registered email address and a clear description of your request. We will respond within 30 days.