Privacy Policy

Klipzo is a collection of free utility tools that operate without collecting, storing, or transmitting your personal data. This Privacy Policy explains exactly what happens (and what does not happen) when you use any tool on this site.

The majority of tools on Klipzo — including PDF editing, image processing, audio conversion, code formatting, and text utilities — run entirely inside your web browser using JavaScript. This means: • Your files, text, and inputs never leave your device. • No data is uploaded to our servers. • Processing happens locally in your browser's memory. • When you close the tab, all data is discarded.

A small number of tools require server-side processing due to the computational requirements of their underlying machine-learning models. These tools are clearly labelled with a "Server-side" badge on their tool page. Currently server-side tools include: • AI Text Detector • Text Humanizer • File Translator When you use a server-side tool: • Your input text is transmitted to our server over an encrypted HTTPS connection. • Processing occurs in-memory on the server using a locally hosted ML model. • The result is returned to your browser immediately. • No input or output is ever written to disk, stored in a database, or retained in any log. • Server access logs, if any, record only the HTTP method, timestamp, and response status — never the content of your request. • The ML models themselves run locally on our server infrastructure and do not communicate with any third-party AI API (no OpenAI, Anthropic, Google, etc.).

Klipzo does not set any tracking or analytics cookies. We may use browser localStorage or sessionStorage exclusively for: • Remembering your last-used tool settings (e.g., selected language, output format) to improve your experience. • These values never leave your browser and are never transmitted to us. You can clear this data at any time through your browser's developer tools or by clearing your browser data.

Klipzo does not embed or load any third-party tracking scripts, advertising SDKs, social media widgets, or analytics libraries. The only external resource loaded is Google Fonts for typography, which is declared in our Content Security Policy. Google Fonts may log standard web server access logs (IP address, browser type) per Google's own Privacy Policy. If this concerns you, using a browser extension that blocks Google Fonts requests will not affect the functionality of any tool.

We implement the following technical security measures: • HTTPS enforced on all connections (HSTS preload). • Strict Content Security Policy (CSP) header to prevent cross-site scripting. • X-Frame-Options: DENY to prevent clickjacking. • Referrer-Policy: no-referrer so your URL is not leaked to linked sites. • Permissions-Policy to disable unnecessary browser APIs (camera, geolocation, payment). • All API endpoints return Cache-Control: no-store headers to prevent caching of user content. • Input size limits on all server-side endpoints to prevent abuse. • SSRF protection on the web screenshot endpoint to prevent access to private networks.

Klipzo does not knowingly collect data from children under the age of 13. Since we collect no personal data from any user, this policy applies equally to users of all ages.

If we make material changes to this Privacy Policy, we will update this page with the new effective date. We encourage you to review this page periodically. Your continued use of Klipzo after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please open an issue on our GitHub repository (linked in the site header) and we will respond promptly.