Effective 20 October 2026
In short
- Files you open in a tool are processed in your browser. They are never uploaded to our server.
- There are no third-party analytics, advertising or tracking scripts, and no third-party cookies.
- We keep our own visit and usage statistics for 180 days. They include only a shortened form of your IP address, never the full address.
- When you ask the AI for a recommendation or a plan, the text you type is sent to our AI model provider. Your files are not.
- Online lookups such as DNS and Whois are made by our server, which sends the host or address you enter to the service being queried.
- We do not sell your personal information.
Who we are
YourTools (“we”, “us”) runs this website and is responsible for the personal data described here. For anything about this policy or your data, email your-tools@elysiafly.com.
Files you process
File tools for images, PDFs, tables, audio, video and text, and the workflows that combine them, run in your browser. Your files are read and processed on your device, and results are saved straight from your browser. They are not uploaded to our server, and we never see them.
Some tools download extra code or data from this site the first time you use them, such as OCR models or fonts. These downloads come from our own server and send nothing about your files.
When you run a workflow, your browser sends its steps and settings (not your files) to our server to check that they fit together. This check is not stored.
The HTML runner shows the HTML you write in a sandboxed frame. If your HTML loads images or scripts from other websites, your browser contacts those websites.
Cookies and browser storage
We set only our own cookies, each needed for a feature of the site:
your_tools_session: a random ID for your browser’s anonymous session, set when you first open a page and kept for 30 days. It ties your visit and usage statistics together, counts your daily AI recommendations and lets us limit abuse of online lookups. Page scripts cannot read it.your_tools_account: keeps you signed in for 30 days or until you sign out. It is only set if you have an account, and we store only a hash of it.your_tools_locale: the language you last chose with the language link, so the home page opens in it. Kept for 365 days.your_tools_favorites: tools you mark as favorites while signed out, kept for 30 days. When you sign in they move to your account and the cookie is cleared.
The site also uses your browser’s session storage, which is cleared when you close the tab, to pass a recommendation or a workflow to the page that opens it and to remember the campaign tags (utm_…) of the link you arrived from.
If you block cookies, the tools still work, but AI recommendations and online lookups need the session cookie.
Visit and usage statistics
We count visits and feature use ourselves, on our own server, to see which tools people use, fix problems and decide what to build next. No outside analytics service receives this data.
For each page view we record the page address and the address of the page that linked to it (both without their query strings), the language, the traffic source and any utm campaign tags, the device type (desktop, mobile, tablet or bot), your shortened IP address and your browser’s user agent, with the time and your session ID.
Before a page view is saved, your IP address is cut down to the network it belongs to: we keep the first 24 bits of an IPv4 address (203.0.113.8 becomes 203.0.113.0) or the first 48 bits of an IPv6 address. Your full IP address is never saved in these statistics.
For feature use we record events such as a tool run starting or finishing (with its duration and any error code), search terms (up to 100 characters), recommendations shown and rated, clicks on links to other websites, favorites added, workflows saved, account sign-ins and sign-outs, page speed, and unexpected errors (the error message and the page it happened on). Apart from search terms, events do not include what you type, and they never include your files. If you are signed in, they are linked to your account.
When we view these statistics, approximate locations (country, region, city) are worked out from the shortened IP addresses with our own copy of a geolocation database. Locations are not stored, and no outside service is asked.
AI recommendations and planning
When you describe a task to get a recommendation, or ask the AI planner to draft a workflow, we send the text you typed, your chosen preferences and any answers to the planner’s questions to the AI model provider we use, along with information about our tools. We do not send your IP address, cookies, account details or files. The provider processes the text to produce the answer, under its own terms.
What we keep:
- for each recommendation, the answer we showed (which may repeat parts of your task), your preferences, the language, and your 👍 or 👎 if you rate it;
- for every AI request, usage data such as the model, the number of tokens, the cost and how long it took;
- the task text exactly as you typed it, but only when nothing on this site fits it, when the answer points to other websites, or when you rate the answer 👎. These tasks show us which tools to build next.
Text you send to the planner is not stored. Please do not type passwords, personal details or confidential information into a task.
Online lookups
The DNS, Whois, SSL certificate, HTTP status, page source, meta tags, IP lookup, HTTP request and port check tools need the internet, so our server makes the lookup you enter. The site or service being queried, and the public DNS and domain registry servers used along the way, see our server’s address, not yours.
We do not store what you look up, with one exception: for each request made with the HTTP request tool, our server logs the method, host and port, your account ID if you are signed in, and your IP address, so that we can investigate abuse. This log is limited in size and older entries are overwritten automatically.
To prevent abuse, lookups are counted per session and per IP address. The counters expire within a day.
The IP lookup tool can show your own public IP address and its approximate location, looked up in our own copy of a geolocation database. Neither is stored.
Accounts
An account is optional. It lets you save workflows, keep favorites across browsers and see your usage. We store your email address, a hash of your password (Argon2id; the password itself is never stored), an optional display name, your language, and when the account was created and last changed. The site sends no emails, so your address is used only to sign you in.
To slow down password guessing, we briefly keep the IP addresses of sign-in and sign-up attempts and delete them within two hours of the last attempt.
You can delete your account at any time under Personal space. This immediately deletes the account, its sign-in sessions, saved workflows and favorites. Usage events and AI usage records are unlinked from the account and deleted when their 180 days are up, as are your visit statistics.
Server logs
Like most websites, our web server keeps standard access logs: your IP address, the address you requested (including any search terms in it), the referring page, your browser’s user agent and the time. We use them only for security and troubleshooting, and they are deleted automatically after a short period.
Who receives your information
- Our AI model provider: the task text and answers described above.
- The sites and services you query with online lookups: the host, address or request you enter.
- Our hosting provider, which runs the server that stores the data described here. The server may be in a different country from yours.
- Authorities, where the law requires it.
We do not sell your personal information or share it for advertising.
Advertising
There are no ads on YourTools today. We may add advertising later, for example through Google AdSense, to pay for running the site. Ad networks use their own cookies and may show personalized ads. Before any ads appear, we will update this policy to name the ad provider, explain its cookies and how to opt out, and ask for your consent where the law requires it.
How long we keep data
- Page views (with a shortened IP address only), usage events, AI records and kept tasks: 180 days.
- Anonymous session records: until the session has expired (after 30 days) and no records above still refer to it.
- IP addresses of sign-in and sign-up attempts: within two hours of the last attempt.
- Accounts, saved workflows and favorites: until you delete your account.
- HTTP request tool logs and server access logs: overwritten or deleted automatically after a short period.
Legal bases
Where laws such as the GDPR apply, we process personal data to provide the features you choose to use, for our legitimate interests in keeping the site secure, preventing abuse and understanding how it is used, and with your consent where the law requires it.
Your choices and rights
You can clear or block cookies in your browser, use every tool without an account, and delete your account yourself. Depending on where you live, you may also have the right to access, correct or delete your personal data, to receive a copy of it, to object to or restrict how it is used, and to complain to a data protection authority. To make a request, email your-tools@elysiafly.com. We may ask for details that show the data is yours.
Security
The site is served over HTTPS only. Passwords are hashed with Argon2id, sign-in tokens are stored only as hashes, keys for the AI provider are encrypted, and the database cannot be reached from the internet. No system is perfectly secure, but we work to protect what we keep.
Children
YourTools is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
When the way the site handles data changes, for example when ads are added, we will update this page and its effective date, and announce significant changes on the site.