Privacy policy

Most tools send nothing at all

Compressing an image, a PDF or a video; merging, splitting or cropping; HEIC to JPG; pulling the audio out of a video; reading text out of a picture with OCR; building a poster — each of these runs as a program inside your browser tab.

The page downloads that program from this site the way it downloads a stylesheet. From then on it reads the file straight off your disk, does the work on your own processor and hands you the result. There is no upload endpoint for these tools. Disconnect from the network once the page has loaded and they keep working.

Because nothing arrives, there is nothing for us to keep, read, scan or pass on. That is not a statement about how carefully we look after your data. There is no copy of it to look after.

The three tools that do send something

PDF Translator, Image Translator and Video Translator need a translation model, and a translation model does not fit in a browser tab. This is exactly what leaves your machine:

• PDF Translator — the PDF stays on your disk. The page pulls the text out of it locally and sends only that text to Cloudflare Workers AI. The file, its pages, its images and its fonts are never transmitted.
• Image Translator — the image stays on your disk. The page reads the text out of the picture on your own machine and sends only that text. The picture itself is never transmitted.
• Video Translator — the video stays on your disk. The page extracts the audio track in your browser and sends that audio for transcription; the transcript is then sent for translation. The video itself is never transmitted.

We do not store the text, the audio or the translation. They are used to answer the request and are not written to any database of ours — the only thing recorded is a number of characters, for counting your allowance. What Cloudflare does with a request inside its own infrastructure is covered by its terms for Workers AI, not by this page.

If a document is sensitive enough that its words must not leave the building, do not use these three tools. Every other tool on the site is still fine for it.

Counting the free allowance without keeping your IP

The three AI tools give every visitor a small free allowance each day, which means we have to count. We count without keeping your IP address.

When a request arrives we take your IP address, a secret of ours and today’s date, hash the three together with SHA-256 and keep the first 32 characters. The stored row holds that hash, the date and a character count. The IP address itself is never written down, and the hash cannot be turned back into it.

Because the date is inside the hash, the same visitor produces a different key tomorrow. Today’s usage cannot be linked to yesterday’s, by us or by anyone who got hold of the table.

Those rows — the per-visitor count, the site-wide daily spend cap and the count of licence-recovery attempts — are deleted three days after the day they belong to.

What a purchase stores

Buying a page pack stores one row containing: the random identifier your browser generated, the order id, a subscription id where there is one, the email address you gave at checkout, the status of the purchase and, where it applies, the end of the paid period. A second row records how many characters that identifier has translated in the current month.

These rows have no automatic expiry. They last as long as the licence does, because they are the only record that you bought it. They are deleted when you move the licence to another browser — the old row goes — and we will delete them on request.

We never see your card details. Payment is handled by Waffo; the card number goes to Waffo and never touches this site.

One more table holds the ids of payment events already processed, so that a delivery Waffo retries is not counted twice. It holds ids and timestamps and nothing about you.

On your own computer

This site sets no cookies. None for analytics, none for preferences, none at all.

The three translation tools keep a single entry in your browser’s local storage, named lft-claim. It holds a random identifier that stands for a page pack you bought. Nothing else is stored there, and it leaves the browser only when a translation request carries it to check your allowance.

Clearing your browser data clears it, which is why a purchase can be moved to a new browser with the order number and the email address you paid with.

No analytics, no tracking, no ads

There is no analytics script on this site. No tag manager, no advertising script, no social widget, no third-party font or stylesheet. Every page loads code from this site and nowhere else.

We have no visitor analytics of our own. The only traffic figures we see are the aggregate request counts Cloudflare shows any site owner about their own site, and those are not tied to a person.

Who else is involved

Two companies, for two jobs:

• Cloudflare — hosts the site and runs the translation and transcription models. Serving any page means Cloudflare’s network handles the request, as it would for any site behind it.
• Waffo — processes payments. Card details go to Waffo and never reach us; in return we learn the order id and the email address used.

There is no one else. No data broker, no advertising network, no analytics provider.

Asking what we hold

You can ask what is stored against your licence, and ask for it to be deleted, at [CONTACT EMAIL]. Say which order it concerns.

For the free-allowance rows there is nothing to ask for. They carry no identifier we could look you up by, and they are gone within three days.

Changes to this policy

If this changes, the date at the top changes with it. The part worth re-reading is the second section: what leaves your computer.