Privacy Policy
Last updated: 31 March 2025. Plain English, no legalese.
Every InstantTools tool runs entirely inside your browser. Passwords, hashes, QR codes, colours — all generated locally. Nothing you type is ever sent to us or anyone else. We have no accounts, no database of users, no ad tracking. The only data that touches a server is the standard stuff any web host sees: your IP address and which page you loaded.
1. What we collect (automatically)
When you load a page on InstantTools, our hosting provider Netlify records a standard server log entry. This is unavoidable for any website. It includes:
- IP address — your internet connection’s address, used by Netlify for DDoS protection and abuse prevention.
- Browser & OS — the user-agent string your browser sends with every request.
- Page requested — which URL you visited and when.
- Referring page — the URL of the site you came from, if any.
We do not access these logs for marketing, analytics, or profiling. Netlify retains them per their own privacy policy. We run no analytics platform — no Google Analytics, no Plausible, no Hotjar, nothing.
2. What we don’t collect (your tool data)
This is the important part. The following information is processed only inside your browser and is never transmitted anywhere:
Every password you generate stays in your browser. We never see it.
Text you hash with SHA-256/384/512 never leaves your device.
URLs and text encoded into QR codes are processed locally.
Encoded or decoded strings are computed in-browser only.
All colour, palette, and gradient generation is client-side.
Generated usernames, slogans, Lorem Ipsum — all local.
We have no user accounts, no sign-up forms, no contact forms, and no payment systems. There is no way to provide us with personal information through normal use of the site.
3. Third-party services
A small number of external services are loaded when you use the site. Here is exactly what they are and what they see:
- Google Fonts — loads the Outfit and JetBrains Mono typefaces. Google logs font requests. We use this on every page. Google Privacy Policy.
- Cloudflare CDN — the QR code page loads the qrcode.js library from cdnjs.cloudflare.com. Cloudflare sees your IP when this file loads. Cloudflare Privacy Policy.
- RandomUser.me — the Name Generator fetches random names from their public API. The request contains no personal data about you, only a parameter for how many names to return. RandomUser.me.
- Netlify — hosts and serves the entire site. See Section 1 for what they log. Netlify Privacy Policy.
Crucially: none of the above services receive anything you type or generate in our tools. They only see the same network metadata (your IP, browser) that any web request produces.
4. Advertising (Google AdSense)
InstantTools displays advertisements served by Google AdSense. Google uses cookies and device identifiers to show ads that are relevant to you based on your browsing history across the web.
This is the one area where data is collected — not by us, but by Google as part of ad serving. Specifically:
- Personalised ads — Google may use your browsing behaviour to select ads. You can opt out at Google Ad Settings.
- Non-personalised ads — if you opt out, Google will still show ads but based on the context of the page rather than your history.
- More information — see how Google uses data when you use our site and the Google Privacy Policy.
5. Cookies
InstantTools itself sets no cookies. We use no tracking, session, or preference cookies of our own.
Google AdSense will set cookies for advertising purposes as described in Section 4. These are set by Google’s domain, not ours.
Some browser features used by our tools (such as storing password history during a session) use in-memory JavaScript variables — not cookies or localStorage. This data vanishes the moment you close or refresh the tab.
6. Your rights
Under GDPR (if you’re in the EU/UK) and CCPA (if you’re in California), you have rights over personal data held about you. Because we hold virtually no personal data, most of these rights are satisfied by default:
- Right of access — we hold no personal data about you beyond what Netlify logs (IP, access time). We do not have a mechanism to query Netlify logs per user.
- Right to erasure — since we store nothing about you ourselves, there is nothing to delete.
- Right to opt out of sale — we do not sell personal data. Ever.
- Google ad data — for data held by Google for advertising purposes, manage it directly at Google My Account.
To exercise any rights or ask questions, contact us at the address in Section 8.
7. Changes to this policy
If we make material changes — for example, adding a new third-party service or changing how advertising works — we will update the “Last updated” date at the top of this page. We recommend checking back periodically if this matters to you.
Continued use of InstantTools after a policy update constitutes acceptance of the revised policy.
8. Contact
For any questions about this privacy policy or how we handle data, you can reach us at:
We aim to respond within 5 business days.