Privacy Policy

1. Architecture & Privacy Philosophy

ShiftTools ("we", "us", "our") operates the web workspace at shifttools.in. Unlike conventional cloud utility websites that upload your files to remote servers for processing, ShiftTools is built on a local-first architecture.

When you use ShiftTools, your browser executes the underlying JavaScript, WebAssembly (WASM), and WebRTC binaries directly on your computer's CPU and GPU. Your files never touch a cloud server.

2. Detailed Tool-by-Tool Privacy Breakdown

Here is specifically how each micro-tool handles data during execution:

• Shiftdrop (P2P File Transfer): Transfers files directly between devices using WebRTC encrypted peer-to-peer data channels. A lightweight signaling server is used solely for browser handshake (SDP exchange). File payload data never touches or stays on any server.
• Chatter (Encrypted P2P Chat): Messages are encrypted end-to-end and stored exclusively in transient browser RAM. Closing the tab immediately destroys all conversation history. No chat logs exist on any server.
• Background Remover: Segments image backgrounds using local ONNX neural network models loaded directly into your browser's WebAssembly memory. No image data is uploaded.
• Image Resizer & Watermark Tool: Processes images using HTML5 2D Canvas rendering locally on your device.
• Video Converter & Audio Converter: Utilizes client-side FFmpeg WebAssembly and Web Audio API threads to transcode media files inside your browser memory space.
• PDF Signer & PKI Validator: Renders PDF pages, embeds signatures, and audits PKI digital certificates (.pfx/.p12) completely in local memory. Sensitive legal documents remain on your disk.
• QR Generator: Renders vector SVG/PNG QR codes locally without tracking parameters or server redirects.
• Crypto Live Charts: Connects directly to public market WebSockets for price tickers. No trading history or personal data is collected.

3. Data We Do Not Collect

Because processing occurs on your device, ShiftTools does not collect or store:

• Your uploaded files, images, videos, audio clips, or PDF documents
• Your name, email address, phone number, or payment details
• Your IP address, browser fingerprint, or usage history
• User accounts or authentication tokens — ShiftTools requires zero signup

4. Infrastructure & Third-Party Hosting

ShiftTools is hosted statically on Cloudflare Pages. When your browser requests static HTML/JS assets, Cloudflare may generate standard edge web access logs (IP address, user-agent, timestamp) necessary to deliver content and defend against DDoS attacks. This network logging is governed by Cloudflare's Privacy Policy.

5. Cookies & Advertising Partners (Google AdSense)

ShiftTools uses browser localStorage strictly to preserve user settings (such as dark mode preferences or last-selected converter parameters) locally on your device.

We may partner with third-party advertising vendors, including Google AdSense, to serve non-intrusive advertisements when you visit our website. Google and third-party vendors use cookies (including the DoubleClick DART cookie) to serve relevant ads based on a user's prior visits to ShiftTools or other websites across the Internet.

• Google's use of advertising cookies enables it and its partners to serve targeted ads based on visits to ShiftTools and/or other sites on the Internet.
• Users may opt out of personalized advertising at any time by visiting Google Ad Settings or aboutads.info.

6. GDPR & CCPA Compliance

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), individuals have rights regarding personal data processing. Because ShiftTools does not collect, store, sell, or process any personal data, we fulfill all privacy compliance mandates by design.

7. Contact Information

If you have any questions or feedback regarding this Privacy Policy or our local-first security model, please reach out through our Contact Page.

8. Security Model

Because ShiftTools processes everything client-side, the traditional attack surface of a web service — server breaches, database leaks, intercepted uploads — simply does not apply to our architecture. Your files never reach a server to be compromised.

Data in transit for Shiftdrop and Chatter is encrypted using DTLS (Datagram Transport Layer Security) built into the WebRTC standard — the same encryption used by video conferencing platforms. The site itself is delivered over TLS 1.3 via Cloudflare's global edge network.

9. Data Retention

ShiftTools retains no user data — because none is collected. All processing is ephemeral. When you close the browser tab, any in-progress work is discarded. There is no database, no user records table, and no files stored on our servers on your behalf.

The only persistence is localStorage in your browser (preferences like theme or last-used settings). You can clear this anytime: browser Settings → Privacy → Clear site data for shifttools.in.

10. Your Rights

Since we collect no personal data, traditional data subject rights (access, rectification, erasure, portability) are guaranteed by design — there is nothing for us to access, correct, delete, or hand over. No consent banner, no cookie wall, no data request form needed.

If you are a resident of the EU, UK, California, or any other jurisdiction with data protection laws, those rights are fully satisfied: we have zero personal data on you.

11. Changes to This Policy

We may update this privacy policy when new tools are added or our technical practices change. The "last updated" date at the top reflects the most recent revision. We encourage you to review it periodically. Continued use of ShiftTools after any change constitutes acceptance of the updated policy.