Privacy Policy

Your privacy matters. This page explains what data WebToolsPlanet collects, why, and how it is used. The short version: we collect as little as possible and never sell your data.

1. Data We Collect

Tool Usage (Anonymous)

When you use a tool, we record the tool ID, the kind of action (for example a view, copy or download) and a timestamp. We do not record the content you enter, your IP address, a device fingerprint, or any personally identifiable information. This data is used only to understand which tools are most useful so we can improve the site.

Error Reports (Automatic)

If a tool crashes, we automatically capture the error message and stack trace to help us fix bugs. These reports contain no personal data — only the technical details of what went wrong and which tool triggered it.

Feedback (Optional)

If you submit feedback via the feedback form, we store your message, feedback type, the tool it was sent from (when you send it from a tool page, plus any reference, such as a recipe ID, that the tool adds to the message), and optionally your email address with your consent. Missing-tool requests also include the requested tool name, category, and example input/output. Your email is used only to reply to your submission and is never shared. To prevent form abuse, we temporarily compare a one-way hash derived from the submitting IP address; the raw IP address is not stored with the submission.

Optional Accounts

You do not need an account to use WebToolsPlanet tools. If you create one, we store your display name, email address, email-verification state, password hash (if you set a password), account role, and database-backed sessions. Session records may include an IP address and browser user-agent string so you can review and revoke active devices. Passwords and one-time verification or recovery tokens are handled by our authentication provider and are never stored in plain text.

We also keep an approximate last-seen time for your account, updated when you sign in or your session is refreshed, at most once every 24 hours. Administrators use it to understand account activity and provide support. It does not record which tools you use or what you enter, and it is deleted with your account.

Authorized administrators can view account details such as your display name, email, verification state, role, registration date, last-seen time and linked sign-in providers. For support and abuse handling, they can also review active session devices and masked IP addresses, product item counts, stored media totals and the titles of up to ten recent workspace items. Product document and email contents are not shown in the console. This does not give administrators access to the inputs or outputs you process in browser-only tools.

Where available, you can choose to sign in with Google. Google shares your name, email address, email-verification state and profile picture with us. We store the Google account identifier and authentication tokens to connect that identity to your WebToolsPlanet account. We never receive your Google password and do not request access to Gmail, Drive or other Google content.

Synced Favorites (Optional)

Signed-in users can sync favorite tool IDs across devices. We store the tool ID and the time it was saved. We do not upload the inputs, outputs, files, recent searches, or tool history associated with those tools. Anonymous favorites remain stored only in your browser.

WorkBoard Tasks (Optional)

WTP WorkBoard has two versions. Without an account, your tasks, notes, checklists and links are saved only in your browser and are never uploaded. If you sign in and open WorkBoard from your workspace, your projects and tasks (titles, notes, tags, dates, repeat settings, reminder times, checklists, links, sub-items and the rich-text page of a task) and the saved views you create (their names and their filter, sort and layout settings, including any text you filter by) are stored in our database as part of your account, so they are available on every device you sign in on. They are not end-to-end encrypted, so our servers can store and process them. They are not used for analytics or advertising. They are visible only to you until you turn on an optional feature described below: sharing a project with people you invite, a read-only share link, files on tasks, email to task, email reminders, the notification digest or a calendar link. Each is opt-in, and some are only available where they are switched on. Deleted tasks stay in Trash for 30 days and are then removed. You can delete all of your WorkBoard data from its Backup and data screen. Reminders appear inside WorkBoard while it is open. Unless you turn on email reminders or the separate notification digest (below), no task content is emailed.

WorkBoard Docs and Databases (optional, signed-in accounts only, and only where they are switched on): pages and databases are saved to your account on our servers, are not end-to-end encrypted, and are not used for analytics or advertising. A page keeps its text, its title and earlier versions of itself: a bounded set of automatic checkpoints (the most recent 50, none older than 90 days) plus the ones you save yourself, so you can look back and restore. While you type, unsaved text is also kept in this browser as a draft for a limited time so a closed tab or a lost connection does not lose it; it is removed when you sign out. A page can point at your tasks, projects and other pages, and a database record can point at them too, but a pointer stores only the item’s identifier: its title and details are read live and shown only to people who can already open that item. A database holds the records, properties and saved views you create; records can be exported as a CSV file from your own screen. Pages and databases are visible only to you, or, if you put one in a shared project, to that project’s members according to their role. Pages, databases and records you delete stay in Trash for 30 days (90 days when a whole project is deleted) and are then removed. They are included when you delete all of your WorkBoard data.

Sharing a project (optional, signed-in accounts only, only where it is switched on, and nothing is shared unless you invite someone): you can invite a named person by email to one project, as an editor, commenter or viewer. Once they accept, everyone in that project sees that project’s task titles, notes, rich-text pages, deadlines, checklists, links, tags, statuses and sub-items, the project’s name and description, and each other’s display names (only the owner sees members’ email addresses). Editors can change those fields. Your own day plan stays private to you: a task’s Plan for day, whether you put it in Someday, and its reminder are saved only for you and are never shown to the other people in the project. Nothing else of yours is shared: your other projects, tasks, habits, reviews, time blocks and focus history stay private. The invitation email contains only the inviter’s display name, the project’s name and a link, and no task content; the link works for 7 days, can be revoked, and only the person who signs in with the invited, verified email address can accept it. We store a one-way hash of the link, not the link itself, and the invited address until the invitation is accepted, revoked or expired plus 30 days. A shared project stays in the owner’s account and counts against the owner’s limits. The owner can remove anyone at any time, and anyone can leave; removing a person also deletes their private plans on that project. If the owner deletes the project, all of their WorkBoard data or their account, the live project is removed for everyone straight away. Other members who had access at deletion receive an in-app notice and have 14 days from that removal to download a read-only recovery copy. JSON includes shared task fields; Markdown also includes shared page text. These copies exclude private plans, reminders, focus history, time blocks, member details, comments, attachments and private linked items. Access expires after 14 days and the copies are removed by scheduled cleanup; deleting the owner’s account does not shorten or extend that window. Restoring the project removes its recovery copy. “Delete all data” also removes your own memberships in other people’s projects and your private plans on their tasks. Projects owned by someone else are not included in your account backup or CSV export. Project members can separately download a copy of the project’s live tasks, or a Markdown document that also includes shared page text; those files exclude private plans, member details, comments and attachments. The site only counts anonymous events such as “a project was shared”, never who or what.

Working together in a shared project (only where sharing is switched on, and only for the people already in the project): the owner or an editor can assign a task to the owner or an editor, and the person it is assigned to is told in the app. A project keeps an activity log of changes to shared fields (a task added, completed or moved, its Due by date changed, who it was assigned to, a comment posted, someone joining or leaving) with the person’s display name and the task’s title at the time, for 180 days; your private plans are never recorded. Commenters and editors can write plain-text comments (up to 4,000 characters) that everyone in the project can read; a comment can be edited for 15 minutes and deleted, and you can delete everything you wrote in a project. Mentioning a member, commenting on a task you are assigned to or have commented on, or completing a task someone is assigned to creates a notice in the in-app notification inbox that is kept for 90 days and shows only what you can still see. Removing someone from a project deletes their notices about it and clears tasks assigned to them. Owners can switch on three simple automations per project (a notice when a task is completed, when a due date is close, and when every task is done); they only send those in-app notices and never change a task. A separate opt-in daily email digest can include titles from unread notices, as described below. We do not show who is online or who has read what.

Share links (optional, signed-in accounts only, only where switched on, off until the owner creates one): the owner of a project can create a read-only link to it. Anyone who has the link, with or without an account, can open a page that shows the project’s name, its tasks’ titles, statuses, priorities, tags and Due by dates, the initials of whoever a task is assigned to, and, only if the owner chose, notes and checklists (or, if the owner chose “progress only”, just numbered tasks). It never shows comments, members’ names or email addresses, files, or anyone’s private plans. The link has an optional expiry, can be replaced or turned off at any time (it stops working at once), is marked so that search engines do not index it, and sets no cookies. We store a one-way hash of the link, not the link itself, a count of views per hour (to limit abuse) and the time it was last opened; we cannot tell who opened it.

Files on tasks (optional, signed-in accounts only, only where switched on): editors and owners can attach a file (pictures, PDFs, text, spreadsheets, documents or zip files, up to 10 MB each, 20 per task) to a task. Files are stored in a private storage bucket, not at a public address; anyone in the project can download them through a link that works for one minute, and they always download rather than open in the page. They count against the project owner’s storage allowance, are removed when the task, the project or the account is deleted, and are checked for type and size but not scanned for malware. Do not attach files you would not want everyone in the project to keep. On supported tool pages, “Attach output to task” lets you explicitly upload the generated file to a chosen project task after you confirm its visibility. Tool input is not read automatically. The shareable checklist tool can also create a project and a read-only share link after you review and confirm the checklist.

Email to task (optional, signed-in accounts only, only where switched on, off until you make an address): you can create a private address that turns an email you send from your own verified account address into a task in your Inbox: the subject becomes the title and the first lines of plain text become the notes (quoted replies and signatures are removed; pictures and attachments are ignored; links and attachment content are never fetched). The message passes through our inbound email provider (Resend), which may retain its own copy. After verifying a signed delivery notification, we retrieve the message content from its authenticated API and check sender authentication. We keep the task it makes and, for 30 days, a delivery record that holds only a one-way hash of the message identifier and the outcome, never the subject or text. Mail from any other address is dropped without a reply. Up to 20 tasks a day. You can turn the address off at any time and it stops working at once. Voice add (optional, off until you turn it on) uses your browser’s own speech recognition: WebToolsPlanet never receives the audio, but some browsers send it to their maker’s servers to turn it into text.

Email reminders (optional, signed-in accounts only, off by default): if you turn on “also email me when a reminder is due” in WorkBoard’s Backup and data screen, then when a reminder you set on a task is due, the title of that task and the reminder time are emailed to your verified account address through our email provider (Resend). Notes, pages, checklists and links are never included, and a deadline alone never sends an email. We send at most one email per check listing everything due, at most 20 emails a day, nothing during your quiet hours (22:00 to 08:00 in your time zone unless you change it), and nothing for a reminder that is more than 24 hours late. Every email has a link that turns this off without signing in, and you can turn it off in the same screen. We keep a short record of which reminders were handled (the task’s internal id and the reminder time, not its title) for 90 days. If you never turn it on, nothing is emailed.

Daily notification digest (optional, signed-in accounts only, only where switched on, off by default): a separate setting can send task and project titles from unread notifications to your verified email address through Resend. Notes, pages, comment text, checklists and links are never included. Only notifications created after you opted in and still accessible to you are eligible. We send at most one digest per local day and per 24 hours, outside your quiet hours, listing up to 25 titles. Unread titles may appear again the next day. The digest and reminder emails share the 20-email daily cap. Each digest has its own unsubscribe link, and you can turn it off in Backup and data without changing reminder emails. A content-free delivery record (your account, date and handling time) is kept for 90 days. Recovery notices are not included in the digest.

Tool pages have a “Save as task” button. It reads nothing from the tool: you see the title, note and page address before saving. Signed out, the task is written into this browser’s own WorkBoard storage and nothing is sent to our servers. Signed in, the title, note and page address (without any query or fragment) are saved to your WorkBoard account, like any other task. Only the tool’s name is counted, never the words you save.

On supported tool pages, “Save as a WorkBoard page” (signed-in accounts only, only where Docs is switched on) shows you the exact text, up to 20,000 characters, and sends it to your account only after you tick a box saying so. It is saved as plain paragraphs in one personal page, like any other page, and appears in your page history. Signed out, nothing is sent: the text stays in the browser. Nothing is read from the tool until you press the button.

Connect other tools (optional, signed-in accounts only, off until you turn it on in Backup and data, and only where the site has switched it on): you can make access tokens that let a tool or an AI assistant read and add to your tasks and pages, and webhooks that tell another service when something changed. We keep only a one-way fingerprint of each token (never the token), its name, what it may do, when it was last used and when it expires. A short log of which route each token called and how it went, with no request or response content, is kept for 30 days. A webhook message names the event and the record’s id and the time, never its words; it is sent only to an address you chose, over https, to a public host. When a token must ask first, the change it proposes (for example a task title or the text to add to a page) waits in your account until you approve or decline it (or it expires after 72 hours), and is removed once it is decided or expired and 30 days old. Once you give a token to a tool, what that tool does with the data it reads is governed by that tool’s own policy, not ours. Turning the switch off pauses every token and webhook at once; revoking a token stops it immediately.

When you use WorkBoard from your account, a task can link to your own bookmarks and email projects. Only a pointer is saved with the task, never the bookmark or email content, and a link to something you have deleted simply shows as no longer available. Your WorkBoard project names (not task titles, notes or pages) are added to your workspace search and recent list, like your other products’ items, and are removed with “Delete all data” or when you delete or trash the project. Links are removed with their task. Only that a link was made is counted, never what it points to.

The WorkBoard focus timer keeps its state, settings and today’s focus minutes in this browser only. When you are signed in, the timer settings (segment lengths, auto-start and sound) are also saved to your account so they are the same on every device, and they are removed with “Delete all data”. When you use WorkBoard from your account, each finished focus segment (when it started, how long it ran, whether it finished, and the task it was for) is also saved to your account so your history is the same on every device. Focus history is kept for 400 days, removed with “Delete all data”, and never used for analytics. You can focus on a shared task too; its focus history remains private to your account and is never shown to other project members.

The WorkBoard weekly review works out its numbers (what you finished, what slipped, what is overdue or parked) in your browser from your own tasks. When you use WorkBoard from your account, the weekly objectives and notes you type (up to three short lines and a note for each week) are saved to your account so they are the same on every device. They are removed with “Delete all data”, kept for 2 years and then removed, and never used for analytics. Without an account nothing about a weekly review is stored.

When you use WorkBoard from your account, the time blocks you place on a day (a task, a day, a start time and a length) are saved to your account so your schedule is the same on every device. They are removed with “Delete all data”, kept for 400 days and then removed, and never used for analytics. Without an account nothing about a time block is stored. Blocks on shared tasks are also private to you; if you lose access to a shared task, its blocks stop appearing in your schedule and calendar feed. Other members never see them.

When you use WorkBoard from your account, the habits you add (a name and how often) and the days you mark each one done are saved to your account so they are the same on every device. They are removed with “Delete all data” or when you delete a habit, the days are kept for 800 days and then removed, and they are never used for analytics or reminders. Without an account nothing about a habit is stored. The separate Habit Tracker tool page keeps its habits and ticked days in your browser only and never sends them to a server.

If you sign in, you can optionally create a read-only calendar link for WorkBoard (it is off unless you create it, and may not be offered on every deployment). The link lets a calendar app on your phone or computer show your open tasks’ Plan for days, Due by dates and time blocks from the last 30 days to the next year. By default the events only say “Task”, “Planned work” or “Deadline”; task titles are included only if you turn that on, and notes, checklists and links are never included. The link is a secret: anyone who has it can read what it contains, and the calendar service you give it to will fetch and may keep a copy. We store only a one-way hash of the secret (not the link itself), the two settings, and when it was created and last fetched. You can replace the link or turn it off at any time, which stops the old link working at once, and the link is removed with “Delete all data”. It is never used for analytics beyond a count of links created. Without an account, or if you never create a link, nothing is shared with any calendar.

2. What We Do Not Collect

• We do not collect the content you paste into our tools. All processing happens in your browser. The exception is data you choose to save to your own account in a product that offers it, such as WorkBoard tasks, described above.
• We do not use advertising trackers (no Google Ads, no Meta Pixel).
• We do not sell your data. We share it only with the service providers needed to run something you switch on, such as our email provider for WorkBoard emails and email to task, or our private file storage for task files, as described above.
• We do not use cross-site tracking cookies.

3. Cookies

We use minimal storage required for the site to function. Optional accounts use an essential, HTTP-only authentication cookie; browser preferences and anonymous favorites use local storage. We do not use advertising cookies. See our Cookie Policy for details.

4. Analytics

We use Google Analytics to understand traffic patterns (pages visited, general geography, device type). Google Analytics may set its own cookies. You can opt out via the Google Analytics Opt-out Browser Add-on.

5. Data Retention

Anonymous usage data and error logs are retained for up to 90 days, after which they are deleted. Feedback and tool-request records are retained until manually removed. Hashed anti-abuse identifiers are stored with those records and are not used for tracking. Request counters that limit abuse of invitation, share-link, calendar-feed and incoming-email addresses keep only a one-way keyed hash of the link or IP address and a count, and are deleted within a day of their time window ending. Account identity, synced favorites and WorkBoard tasks are retained until you remove them or delete the account. The limited shared-project recovery copy described above remains available to existing members for 14 days after removal, including account deletion. Sessions and one-time verification records expire and are removed through scheduled cleanup; security events are retained only for the documented operational window.

6. Your Rights

You can delete a normal account from its Security page after confirming the request by email. This removes its credentials, sessions, profile, synced favorites, and live WorkBoard tasks, projects and saved views. Existing members of your shared projects retain the limited 14-day recovery copy described above. You may also request deletion of feedback you submitted by contacting us. Since anonymous tool usage data cannot be linked to an individual, it cannot be retrieved for an individual deletion request.

7. Contact

Questions about this policy? Reach us via the contact page.