Privacy

ToolVault processes everything on your device. Here is exactly what that means.

100% local processing

Image conversion runs in your browser via the open-source libwebp WebAssembly codec. Your files are never transmitted — there is no server.

Verify it yourself

Open DevTools → Network while converting a file. You will see requests to ToolVault's own static assets and (if you allow it) the Google Analytics script — never your file data.

Where files are stored

Saved files live in your browser's IndexedDB storage on this device. Clearing browser data, using a private window, or switching devices removes them — back up important files.

Analytics

We use Google Analytics with page-level events only. No file names, sizes, or parameters are ever sent.

Cookies & tracking

No cookies, no ad SDKs, no cross-site tracking.

Honest limitations

Notifications require permission (otherwise you get in-app toasts). Background processing pauses when the tab is closed.

Open source

The code is public on GitHub so anyone can audit the privacy promise. Link arrives with the open-source release.