Privacy Policy

Plain-English Summary

BoltQuickTools does not collect, store, or transmit any data you enter into the tools on this site. Every tool runs entirely in your browser. The site shows third-party advertising (Google AdSense), and that ad system uses cookies. The Google ad script does not load at all until you accept the consent banner that appears on your first visit, and you can change your choice at any time using the Cookie settings link in the footer.

The rest of this policy spells the same idea out in the level of detail required by GDPR, CCPA, and Google's publisher policies.

1. Who we are

BoltQuickTools (referred to here as "we", "us", or "the site") is operated by Λ as a sole proprietorship. The site is reachable at boltquicktools.com and contact for all privacy questions is contact@boltquicktools.com. There is no corporate entity, holding company, or affiliate behind the site.

2. Data we collect directly

None. We do not collect, store, or process any personal data ourselves. All tools on BoltQuickTools run client-side in your browser using standard Web APIs (Canvas, Web Crypto, FileReader, etc.). Your inputs (text, images, files, credentials) are processed locally and never reach our servers. You can verify this in your browser's Developer Tools (Network tab).

We do not require user accounts, logins, or any form of registration. We do not run analytics that observe your tool usage or the content you enter. We do use Cloudflare Web Analytics, a cookieless counter that records page views and load timing without cross-site tracking; it is described in section 3. The site's only server-side component is the static-file web server that delivers HTML, CSS, JavaScript, and images.

3. Data collected by third parties on our pages

Four third parties may set cookies or process limited data when you visit BoltQuickTools:

• Google AdSense displays advertisements. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or to other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings or www.aboutads.info. Google and its certified partners also use cookies, device identifiers, and contextual signals to measure ad performance and prevent fraud. Categories of data: cookie IDs, IP address, user agent, referring URL, ad-interaction events. Google's Privacy Policy and How Google uses information from partner sites describe this in full.
• Google Fonts serves the Inter typeface from fonts.googleapis.com. Google may log the IP address of the request. We use display=swap to reduce visual instability while fonts load. Google's Privacy Policy applies.
• Cloudflare provides our CDN, DDoS protection, DNS, and Web Analytics. Cloudflare logs metadata (IP address, timestamp, requested URL) for these protective purposes, and its Web Analytics beacon counts page views and load timing without cookies and without tracking you across sites. Cloudflare does not set cookies for our site beyond a small security cookie used to identify malicious traffic. Cloudflare's Privacy Policy applies.
• Google Translate powers the optional language switcher. The translation widget script loads from translate.google.com, and choosing a language sets a first-party googtrans cookie that remembers your choice. Selecting English again, or never using the switcher, keeps translation inactive. Google's Privacy Policy applies.

4. Cookies and how we manage consent

We use cookies in three categories:

• Strictly necessary: a single first-party value (cookie-consent) stored in localStorage to remember your consent choice. Without this, the banner would reappear on every page.
• Advertising: cookies set by Google AdSense and its certified ad partners, used for ad delivery, frequency capping, and measurement. The Google ad script is only loaded after you choose Accept, so these cookies are not set if you reject or ignore the banner.
• Functional: small localStorage values (recent tools, randomizer session counters, language choice) used by individual tool pages to remember your preferences locally. These never leave your browser.

If you are in the European Economic Area, the United Kingdom, or Switzerland, advertising cookies are governed by the EU User Consent Policy. Today the site uses its own first-party consent banner: the Google ad script is blocked until you choose Accept, and choosing Reject keeps it blocked. We plan to adopt Google's certified Consent Management Platform (Funding Choices, integrated with the IAB Transparency & Consent Framework) as the consent surface for EEA, UK, and Swiss visitors once AdSense review completes, and we will update this policy when that happens.

You can change your consent decision at any time with the Cookie settings link in the footer of every page, which re-opens the consent banner. Clearing the cookie-consent entry from your browser's localStorage does the same thing. You can also opt out of personalized advertising at the Google level via Google Ads Settings, or at the industry level via aboutads.info (US) or youronlinechoices.eu (EU).

5. Legal basis (GDPR Article 6)

For users in the EEA, UK, and Switzerland, our legal basis for any data processing is:

• Consent (Article 6(1)(a)) for advertising cookies and personalized ads.
• Legitimate interest (Article 6(1)(f)) for the security cookies set by Cloudflare to prevent attacks on the site.

You have the right to access, rectify, erase, restrict, or object to processing, and to data portability. Because BoltQuickTools does not store personal data ourselves, exercising these rights against the site is straightforward: there is nothing for us to look up. For data held by Google or Cloudflare, please use their data-subject-request channels directly.

6. CCPA / CPRA (California)

Under the California Consumer Privacy Act and California Privacy Rights Act, California residents have the right to know what personal information is collected, to delete it, to correct it, and to opt out of "sale" or "sharing" of personal information. We do not sell personal information. Any personal information processed by Google AdSense or our infrastructure providers is governed by their respective notices linked above. To exercise CCPA rights against those providers, please use their published data-request portals.

7. Children

BoltQuickTools is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently received data from a child, please email contact@boltquicktools.com and we will take immediate steps to address it.

8. Security

The site is served over HTTPS with TLS 1.3 via Cloudflare. We do not run any server-side code that touches user-entered data, which removes an entire class of breach risk. Tool inputs that look like credentials (Basic Auth headers, JWT payloads, key generators) are processed entirely in browser memory and discarded when you close the tab.

9. Changes

This policy may be updated. We will revise the "Last updated" date at the top whenever we make a change. Material changes (new categories of data, new third parties, changes to legal basis) will also be announced on the changelog page.

10. Contact

For questions about this policy or to exercise any of the rights described above, email contact@boltquicktools.com. Replies typically go out within 48 hours.