Privacy, in plain English

The short version

Your files and what you type

When you add a file to one of the PDF or image tools, your browser reads it and does the work on your device. The file is not sent to our servers. The same goes for text and numbers you enter into the calculators and utilities: they are handled by the page you are looking at.

That is a design choice rather than a promise we have to keep remembering. There is no upload step in these tools for us to leave switched on by mistake. You can see it for yourself in your browser’s Network tab.

Outside services some tools use

These are the cases where your browser contacts someone other than us. None of them receives your document.

We also send a Content-Security-Policy header with every page, which limits which places a page may load content from or contact.

Advertising

The site shows ads, served by third-party advertising networks. To show and measure ads, and in many cases to personalise them, these networks may use cookies, device identifiers and similar technology, and may collect your IP address, browser and device information and the pages you view. They do this under their own privacy policies, and we don’t control what they collect.

What we do control: we don’t give advertisers your files or anything you type into a tool. That stays in your browser. Ads are shown separately from the tools, and the tools work the same whether or not an ad loads.

Where the law requires your consent before ads that use cookies or personal data are shown, for example in the EU, the EEA and the UK, we ask for it first, and you can change your choice later. You can also:

• turn off personalised ads in the ad network’s own ad settings, or through industry opt-out tools such as optout.aboutads.info and youronlinechoices.eu;
• block or delete cookies in your browser settings (see cookies & storage);
• use a content blocker. The tools don’t depend on ads loading.

What we collect

Anonymous usage statistics

To learn which tools people use and where things break, the site can record a small anonymous event when you open a page or use a tool. An event contains:

• the event type (page view, tool use, time on page, click, error) and the tool’s id;
• your country, as reported by our network provider at the edge. We never read or store your IP address;
• whether your screen is phone-sized or larger, and the website you came from, if any;
• a random session id that exists only for that browser tab, and for returning visits a simple yes/no “opened this tool before” flag (the date behind it never leaves your device);
• for errors, a short script error message.

Events never contain the content of your files or anything you typed into a tool. To stop abuse, each request is checked against a rate limit using a scrambled form of your IP address. That value is used on the spot and never written to our database. We do not use Google Analytics or session-recording tools. Advertising is covered separately above.

Bug reports and messages

If you send a bug report, we receive what you write (the tool, the kind of problem, a description, optional steps, and an optional email address if you want a reply), plus a few technical details that are attached automatically in the background so we can reproduce the problem. They are: the page you reported from, browser and device, screen and window size, language, time zone, country, the labels of your last few clicks (never anything you typed), the kind and total size of the last file you gave a tool (never its name or content) and recent script errors from that page. We don’t record your IP address. If you email us, we receive your message and address. We use these only to look into the problem and to reply.

Cookies and browser storage

We don’t set cookies of our own for visitors. Advertising networks may set theirs, as described under Advertising. We do use your browser’s local storage for things like your light or dark theme, favourite tools, last-used settings, saved signatures if you choose to save one, and calculator history. This data stays on your device and is never sent to us. The cookies & storage page lists everything, and how to clear it.

How long we keep things

Anonymous usage events are kept for up to 90 days and then deleted. Bug reports and emails are kept for as long as it takes to look into them and reply, and you can ask us to delete yours at any time. Data stored in your own browser stays there until you clear it.

Who we share with

We don’t sell, rent or trade personal information. Our site and its small backend are served by a hosting provider, who handles the network traffic that any website host handles, under its own privacy terms. The advertising networks described above receive the technical information that comes with loading and showing an ad. Beyond that, the only parties involved are the outside services listed in the table above.

Your choices and rights

• You can clear everything stored in your browser at any time (see the cookies page).
• You can use the tools without sending us anything at all. They work with statistics blocked.
• Depending on where you live, for example under the EU and UK GDPR or India’s Digital Personal Data Protection Act, you may have the right to ask what personal data we hold about you, to correct it, or to have it deleted. We don’t keep accounts or identifying data about visitors, so there is usually nothing to look up. If you have written to us or sent a report, email hello@khohari.com and we will sort it out.

Security

The site is served over HTTPS and sends a Content-Security-Policy that limits what a page can load or contact. Because your files never leave your device, there is no stored copy of them for anyone to breach. No system is perfect, so if you spot a security problem please tell us at hello@khohari.com.

Children

Khohari is a general-purpose toolbox and isn’t aimed at children under 13. We don’t knowingly collect personal information from children.

Changes to this policy

If we change how we handle data, we will update this page and the date at the top. If a change is significant, such as a new kind of data collection or a new type of advertising, we will say so on the about page as well.

Contact

Questions about privacy are welcome at hello@khohari.com, or through the contact page.