Guide

7 min read

What “private browser tools” actually mean

A first-party threat-model page: verify with Network tab, read our exceptions, skip vague “100% private” marketing.

Tokitool markets tools as private when the sensitive work happens on your device. That claim has edges. This page is our plain-language model of those edges: the same story we tell on About and in the Privacy Policy, so you can verify us instead of trusting a badge.

The promise we intend

For chat exports, photos, JSON, Base64, timestamps, passwords, and favicons: after the page (and any needed scripts) load, converting or generating should not require uploading your input to Tokitool’s servers. You pick a file or type text; the browser APIs do the work; you download or copy the result.

How to verify a Tokitool tool yourself

  1. Open DevTools Network.
  2. Reload the tool page; wait for scripts and fonts to finish.
  3. Clear the network log.
  4. Run the action (drop a file, click Generate, format JSON).
  5. Look for large POST/PUT uploads of your content. You should not see your chat or photo body posted to an API for the core conversion.

That check is more useful than reading marketing adjectives. It is also how we want reviewers and users to pressure-test us.

Exceptions we disclose (not hide)

  • Background Remover may download an on-device AI model from a CDN the first time. That is weights/code for local inference, not “email us your photo.” Details stay in the privacy policy.
  • Hosting / CDN logs can still record IP and URL for delivery and abuse prevention. That is normal for any public site and is not the same as storing tool inputs.
  • AdSense loads no script while ad units are off — the account link is a verification meta tag only. When we do enable ads they are not placed inside editors or file dropzones by design (see our placement notes in code and privacy).

What private tools do not fix

A shared family PC, malware, or you pasting an export into a group chat will defeat on-device processing. Delete downloads you no longer need. Treat passport photos and WhatsApp exports as sensitive even after they become PDFs or JPEGs.

How we avoid “thin” or misleading product pages

Unfinished ideas are not advertised as live tools on the homepage. Guides exist to teach workflows around real features (WhatsApp PDF, compression, passport sizing, QR, passwords, favicons), not to manufacture doorway pages for keywords. If a page overclaims, email hello@tokitool.com and we will correct it.

First-party explanation of Tokitool’s privacy model. Not scraped from another “online tools” site; aligned with how these pages actually behave today.