Privacy policy

The short version

• Files you add to a tool are processed inside your browser. They are not uploaded, and we cannot see them.
• We keep anonymous counts: how many jobs finished, how many files and their total size. Numbers only, never names or contents.
• Ads come from Google AdSense, which uses cookies. In the European Economic Area, the United Kingdom and Switzerland you are asked for consent first.
• There is no account and no selling of personal data. We do not follow you to other sites; Google's advertising cookies may, as described under cookies and advertising.

Who is responsible

PieToolkit, reachable at legal@pietoolkit.com, is responsible for the data this policy describes. The policy covers pietoolkit.com and the API that serves it.

Your files

Tools on PieToolkit process files inside your browser. Files are not uploaded to our servers and we have no access to them, not their names, not their contents.

The PDF editor keeps the PDF you open and your edits in your browser's own storage on this device, so a reload or a closed tab does not lose your work. That includes the original file as it was before any edit or redaction. Nothing in it is sent anywhere. Pressing Close in the editor, or Remove them from this browser after a download, deletes it. A copy older than seven days is deleted the next time you open the PDF editor. On a shared computer, remove it when you are done. The editor loads its fonts and its PDF engine from our own site.

Website and network checks

Most of the website and network tools cannot work inside your browser alone, because they need computers in other countries or data that only other services have. When you start a check, your browser sends the address straight to the service that answers it:

• Globalping, a free network of test computers run by jsDelivr, is used by the website checker, the is it down checker, the ping test, the redirect checker and the website technology checker. It receives the address and your IP address, which it uses to count your free tests. Its results are public for up to six months, so the tools leave out login details, the part of a link after ? and paths that look like a private link, unless you choose to keep them.
• Cloudflare's public DNS resolver receives domain names for DNS and email records. If it does not answer, Google Public DNS receives them instead.
• rdap.org and the domain's registry receive the domain or IP address for the WHOIS lookup.

The website checker is one tool: whichever of its pages you start on, one check runs every part above at once and shows them in one report. Two parts use our own server, because the services behind them need a key that must not sit in a web page:

• Every check asks Google's Chrome UX Report about the site's domain through our server, for its real-user speed and its share of phone visits. Answers are kept for six hours.
• The speed part sends the address to Google PageSpeed Insights through our server, once per report. We keep the result for 15 minutes so that a repeated test of the same page is quick, and store nothing after that. A short automatic check by Cloudflare Turnstile keeps bots from using up the test allowance.

The website checker's rank list is stored on our own site, so looking up a rank tells nobody else what you checked. PieToolkit does not store the addresses you check. The report page's address holds only the cleaned address, so you can share or bookmark it; whoever opens it starts a new check with one click. Your browser keeps the last check you started in its session storage, so the report page can pick it up; it is gone when the tab closes. The PDF report is made in your browser and nothing about it is sent anywhere.

Send to phone

The QR code beside a finished file connects your phone and your computer directly to each other. Our server only introduces the two devices: it keeps a room with a random id and the sealed connection details of both devices for up to 10 minutes, then deletes it. The key that seals them travels only in the QR link, in the part after # that browsers never send to a server, so we cannot read the details or sit in the middle. The connection itself is encrypted end to end. A STUN server (Cloudflare's public one by default) sees the addresses of both devices so they can find each other, and when the devices cannot reach each other directly the encrypted bytes may pass through a relay server that cannot read them. If we run that relay ourselves or through a provider, this page names it.

What we collect, why, and for how long

| What | Why | How long | | --- | --- | --- | | Usage counts: per tool and per day, how many jobs finished or failed, how many files they had, their total size in bytes and how long the jobs took | To see which tools are used and to show the live counters above the footer | Kept indefinitely as daily totals. They contain no names, no contents and no identifiers | | Search queries that found no tool: the text you typed | To build the tools people look for | 180 days | | Feedback you send: the message, the page you sent it from, the tool it concerns and, if you give it, your email address | To read it and reply | 365 days | | Newsletter sign-up: your email address and the time you signed up | To send you a short email when a tool goes live or something changes | Until you unsubscribe: write to hello@pietoolkit.com, or use the link in any email we send, and the address is deleted | | Your IP address, in memory only | To limit how many requests one address can make (abuse prevention) | Up to one minute, or up to one hour for the website speed test. It is never written to disk or a database | | Server logs at our hosting providers (Cloudflare, and the host of our API and relay when they run on a server of our own) | Security and abuse prevention | For the short period the provider keeps them |

Where European law applies, the legal basis for the counts, the logs and the abuse limits is our legitimate interest in running a free service that works; for personalized ads and the newsletter it is your consent; for feedback it is your request that we read and answer it.

Our servers and database, and the services of Cloudflare and Google named on this page, may process data outside the country you are in, including in the United States, under the safeguards those providers offer such as standard contractual clauses.

Cookies and advertising

PieToolkit sets no cookies of its own. Your theme choice, lite mode, your recent searches and the PDF editor's saved session live in your browser's own storage and are never sent to us.

Advertising on the site comes from Google AdSense. Google and its partners use cookies, including the DoubleClick cookie, to show ads based on your visits to this and other websites. You can turn personalized advertising off in Google's Ads Settings or opt out of other vendors' personalized ads at aboutads.info. In the European Economic Area, the United Kingdom and Switzerland, a consent dialog from Google appears before any personalized ad is shown, and you can change your choice at any time through that dialog. Google's own use of data is described in How Google uses information from sites or apps that use our services.

The website checker's report page loads Cloudflare Turnstile for its speed part, which may set a cookie to remember that your browser passed its check. It is not loaded anywhere else.

Analytics

Our host, Cloudflare, can count page views for us with Cloudflare Web Analytics, which uses no cookies, does not fingerprint your browser and does not follow you to other sites. We use no other analytics service and no advertising pixel of our own.

Children

PieToolkit is not directed at children under 13, and we do not knowingly collect personal data from them. The only personal data a visitor can give us is an email address in the feedback form, and it is optional.

Your rights

If you are in the European Economic Area, the United Kingdom or another place with similar law, you can ask us to tell you what personal data we hold about you, to correct it, to delete it, to limit how we use it, or to hand it over in a portable form, and you can object to processing based on legitimate interest. In practice the only personal data we could hold is a feedback message with your email address. Write to legal@pietoolkit.com and we will answer within a month. You can also complain to your local data protection authority.

If you are a California resident: we do not sell or share personal information, and we do not use it for targeted advertising ourselves. Google's advertising cookies are governed by your consent choices and Google's own policies, described above.

Security

The site is served only over HTTPS with strict security headers. Every request to our API is checked against a fixed schema and rate limited. No secret keys are placed in the pages your browser loads. User files are never stored, so there is no store of user files to breach. If you find a security problem, write to security@pietoolkit.com.

Open source

The tools are built on open source libraries. The notices their licenses ask us to carry are in the third-party notices.

Changes to this policy

When something in this policy changes, we update the text and the date at the top of this page. A change that affects what we collect is announced on the page itself before it takes effect.

Contact

Questions about privacy: legal@pietoolkit.com. Other ways to reach us are on the contact page.