Privacy Policy.

Last updated: September 19, 2026

The short version: Most of the free tools process your file entirely inside your browser and never upload it. Some tools — the AI ones — do send what you give them to an AI provider, and every tool page says which kind it is before you use it. Separately from the tools, this site does collect some data about visits: Google Analytics, Google AdSense advertising cookies, a first-party usage log that records your IP address, ordinary hosting logs, and whatever you choose to send through a form. This page sets out all of it.

Who runs this site

TaimurTools is operated by Taimur Hassan Siddiqui, based in Pakistan, working with clients worldwide. There is no company entity, no office and no staff beyond the founder. Contact details are at the bottom of this page.

The free tools: which ones send your data anywhere

This is the part people most want a straight answer on, so it is first. There is no single answer for all 56 tools — it depends on the tool, and each tool page carries a panel directly above its controls stating which of these applies to it.

Tools that run entirely on your device

Around 29 of the tools — merging, splitting, rotating, compressing, watermarking and numbering PDFs, converting Word, Excel and PowerPoint files, converting and resizing images, OCR on PDFs and images, video trimming and conversion, QR codes, the password checker and others — open and process your file with JavaScript inside the page. The file is never uploaded, and I never receive it, see it or store it.

One thing to be precise about: these pages do download the processing library they need from a public CDN (cdnjs.cloudflare.com, cdn.jsdelivr.net, unpkg.com, and tessdata.projectnaptha.com for OCR language data). That is a normal one-way download of program code to your browser. It carries no part of your file. But it does mean the CDN sees your IP address, as it would for any script on any website, and it means these tools are not usable with no connection at all on first use.

Tools that send your input to an AI provider through this site

Around 24 tools — the AI image, video, writing, captions, SEO, resume, document, review, lead, prompt, thumbnail and interior tools, plus the AI PDF parser, Image to Code, the AV script extractor and the AI voices in Text to Speech — send what you submit to taimurtools.com/api.php, which forwards it to an AI provider and returns the result. The providers used are Google Gemini, Groq and Hugging Face.

What gets sent is not only text. It includes, depending on the tool: the prompt you type, text extracted from a document you uploaded, reference or source images you uploaded (the AI Image Generator's reference image, Image to Code's screenshot, the AI Prompt Maker's picture, Image Enhancer's photo in its Restore, Colorize, Upscale and Denoise modes), and audio or video files you upload to the AV Script Extractor for transcription. I do not store any of it. What the AI provider does with it is governed by that provider's own terms, which I do not control.

Tools that send your text to a third party directly

AI Summarize PDF and Translate PDF work differently and this is worth reading. They extract your PDF's text on your device, then send that extracted text straight from your browser to Pollinations.ai (text.pollinations.ai). It does not pass through this site's server at all. The AI Prompt Maker may also fall back to Pollinations.ai, sending your uploaded image, if the primary provider is unavailable.

Do not use any of the AI tools on confidential, personal, client or legally privileged material. Use the local tools for that.

Usage counters

Each of the 56 file and AI tools is limited to five runs per day on the free tier. That counter is kept in your browser's localStorage on your own device. It is not sent anywhere, it is not tied to an identity, and it does not follow you to another browser or device. The calculators listed under Students, Teachers and Office on the tools page (GPA, percentage, word counter and so on) have no daily limit: they run entirely in your browser and send nothing anywhere.

What this site collects about your visit

Separately from the tools, and regardless of which tool you use:

Google Analytics 4 (measurement ID G-EXW1S3CVW9) records page views, approximate location at country and city level derived from a truncated IP address, device and browser type, and the site you arrived from, and sets cookies to recognise returning visits. It never receives the contents of a file you process or anything you type into a tool. How Google uses this data · Opt out
Google AdSense serves the advertising on some pages of this site and sets advertising cookies. Depending on the consent choice presented to you, advertising may be personalised or non-personalised; either way Google may process your IP address and ad-interaction data. How Google uses advertising cookies · Ad settings
A first-party usage log. When you trigger certain events on this site — opening a page type, clicking a call to action, submitting a form — the page posts a short record to /api/track.php on this server. That record contains the event name, the page path and page type, any campaign parameters in the link you arrived from, a random visit identifier stored in your browser, and your IP address. It does not contain your files, filenames, prompts, or anything you typed into a tool. It is stored on the server, capped at the 50,000 most recent records, and is used only to see which parts of the site get used.
Hosting logs. The hosting provider records ordinary web-server logs — IP address, user agent, requested URL, timestamp — for every request, as any web host does.
Google Fonts serves the typefaces used on the site. Google may log your IP address when your browser requests them. Google Privacy Policy
Browser storage. Your theme preference, A/B test assignment, visit identifier and per-tool usage counters are kept in localStorage on your device. Saved invoice drafts and resume data, if you use those tools, are also kept there and nowhere else.

If you contact me or submit a form

If you use a contact form, an audit, the strategy-call form or a lead form, what you enter is sent to this site's server and is: stored in a lead record on the server; emailed to me; and copied into a private Google Sheet I use to keep track of enquiries. The record also includes the campaign parameters and landing page from your visit, so I know where an enquiry came from. If you email or message me on WhatsApp instead, I receive whatever you choose to send.

If a form lets you attach a file, that file is uploaded to this server (maximum 15 MB, file type checked) and stored outside the public web root. Uploaded files are automatically deleted after 60 days.

I use all of this only to reply to you and to carry out work you ask for. I do not sell it and I do not use it for advertising.

Legal basis and your choices

Where the UK or EU GDPR applies to you: analytics and advertising cookies are set on the basis of your consent, given through the consent prompt; the first-party usage log and hosting logs rest on my legitimate interest in understanding and securing the site; and processing an enquiry you send me rests on taking steps at your request. You can withdraw consent for advertising and analytics cookies at any time through the consent controls on the site and through the Google opt-out links above. The consent prompt is shown to visitors in the European Economic Area, the United Kingdom and Switzerland, and those cookies stay off there until you accept. Everywhere else, analytics and advertising cookies are set when you visit; you can block them in your browser settings or with the Google opt-out links above.

You can ask me what data relating to you I hold, ask for it to be corrected, or ask for it to be deleted, by emailing the address below. You can clear everything held in your browser by clearing site data for taimurtools.com. You can use the tools without giving any personal information at all.

Children's privacy

This site is not directed at children under 13 and I do not knowingly collect information from them.

Security

All connections to this site use HTTPS, and HTTP Strict Transport Security is enforced. API keys for the AI providers are held server-side and are not exposed to your browser. Lead records and uploaded files are stored outside the public web root, and uploaded files are deleted after 60 days.

I will not tell you the site cannot be breached. It is a small site on shared hosting run by one person; no system is immune. What I can tell you is what is actually held: for the local tools, nothing at all — your files are never sent here, so there is nothing about them to lose. What exists on the server is the usage log, hosting logs, lead records and any files you deliberately attached to a form.

Changes to this policy

If how data is handled changes, this page is updated and the date at the top changes with it. This policy was substantially rewritten on 19 September 2026 to correct earlier wording that described all the tools as local-only and understated what the site collects.

Contact

Email: taimur.siddiqui87@gmail.com | WhatsApp: +92 311 4488938