Privacy

This page is written to be checkable rather than reassuring. Anything below can be verified from your own browser in about a minute, and the last section tells you how. Where something does leave your browser, it is named here — a privacy page that claims “no third-party requests” while loading two of them is worse than no privacy page at all.

What Sofritools does not do

• No accounts. There is no sign-up, no login, no email field, and no mailing list.
• No cookies. None — not for sessions, not for preferences, not for advertising. That is also why you have never seen a consent banner here: there is nothing to consent to.
• No uploads. Files you drop into a tool are read by your own browser and processed in memory. They are never transmitted anywhere.
• No backend and no database. The site is a set of static files. There is no application server that could receive your input even if the code tried to send it.
• No storage of your content. Tools do not write what you type tolocalStorage, IndexedDB, or anywhere else. Close the tab and it is gone.
• No ads, trackers, pixels, fingerprinting, session recording, heatmaps, A/B testing SDKs, or chat widgets. There is no advertising code on this site at all.

What does leave your browser

Exactly two third parties are contacted, and neither one receives your input.

• Google Fonts — fonts.googleapis.com andfonts.gstatic.com. The site loads two typefaces, Bricolage Grotesque and IBM Plex Mono. Your browser requests a stylesheet and some font files, which means Google sees your IP address and user agent the way any third-party asset host would. It receives nothing you typed into a tool. Self-hosting the fonts would remove this request entirely and it is on my list.
• Cloudflare Web Analytics — static.cloudflareinsights.com. A small beacon script is injected by the host on every page. It reports the page URL, the referrer, and coarse load-performance timings, and Cloudflare derives country, browser and device class from the request itself. It sets no cookies, does no cross-site tracking, and builds no per-visitor profile; what I see is an aggregate count of which pages get visited. That number is the only thing telling me which tools are worth building more of.

One more thing worth stating plainly, since it is true of every website: the site is hosted on Cloudflare, so requests for these pages pass through their network and appear in ordinary edge logs (IP address, URL, timestamp, user agent) the same way they would with any host. That is request metadata, not your data. SeeCloudflare’s privacy policy and Google’s for what each of them does with it.

How to check all of this yourself

Do not take my word for it. Three things you can do right now:

1. Open your browser’s developer tools, go to the Network tab, then use any tool on this site with real input. You will see the two hosts above and nothing else. You will not see your input going anywhere, because there is no request carrying it.
2. In the same panel, look at the response headers for the page. The site sends a Content-Security-Policy that your own browser enforces — it is a list of the only places this page is permitted to talk to. A tool that tried to POST your data to some other endpoint would be blocked by the browser, not merely discouraged by me.
3. Turn off your Wi-Fi and keep using the tool. After your first visit the tools keep working offline, which is only possible because the work was never happening on a server.

default-src 'self';
script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com;
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
font-src https://fonts.gstatic.com;
img-src 'self' data:;
connect-src 'self' https://cloudflareinsights.com;
frame-ancestors 'none'

Offline use and the service worker

The site registers a service worker so the tools work with no connection. It keeps copies of pages, styles, scripts, and icons in your browser’s own Cache Storage, on your device. That cache holds the site’s files, never your input, and nothing in it is sent anywhere. You can wipe it any time by clearing site data for sofritools.com in your browser settings. Pages are always fetched from the network first when you are online, so an update reaches you immediately rather than being masked by a stale copy.

Your data rights, briefly

There is nothing to request, export, or delete, because there is nothing held: no account, no database, no analytics profile tied to you, no email address. If you are evaluating this site for GDPR, CCPA, or an internal review, the useful summary is that Sofritools collects no personal data and processes no user content off-device; the only processing that happens at all is your host-level request metadata at Cloudflare, and the font requests your browser makes to Google.

If any of this changes

Sofritools will eventually carry contextual affiliate links, and high-traffic converter pages may carry ads. If and when that happens, this page changes first and says exactly what was added, what it loads, and from where. Three things are not on the table regardless: uploading your files, tracking cookies, and selling anything about you. If you ever find this page contradicting what the site actually does, treat your browser’s network tab as the source of truth and this page as the bug.