Effective Date: October 15, 2026 • Last Updated: October 15, 2026
Privacy Policy
FetchToolKit (“we”, “us”, or “our”), published by FetchToolKit (Sri Lanka), is built on a strict local-first engineering principle: your files, images, text documents, and developer payloads are processed inside your browser and are never uploaded to our servers.
1. Truthful Four-Layer Data-Flow Inventory
Rather than hiding behind vague legal boilerplate, we separate our data architecture into four distinct technical layers so you know exactly what stays in your browser and what touches network infrastructure:
Layer 1 — Tool Input & Output Data (100% Local Browser Memory)
Images, text, JSON payloads, Base64 strings, and URLs entered into tools marked isStrictlyLocal: true are processed exclusively inside your device's volatile RAM using Web Workers, WebAssembly codecs, and browser blob: Object URLs. Zero bytes of your tool inputs, outputs, or filenames are ever transmitted to FetchToolKit servers, logged to telemetry, or written to localStorage or IndexedDB.
Layer 2 — Essential Local Browser Storage (localStorage)
We store only non-identifying user interface preferences on your device—specifically your color theme preference (fetchtoolkit-theme: light or dark) and your privacy/consent choices (fetchtoolkit-consent). These keys never leave your browser.
Layer 3 — Static Hosting & Edge Security Logs (Cloudflare Pages)
Like every static website on the internet, when your browser requests HTML, CSS, JavaScript, or WebAssembly assets from our global content delivery network (Cloudflare Pages), your IP address, requested page URL, TLS handshake metadata, and standard HTTP User-Agent headers are processed by Cloudflare for routing, caching, and automated DDoS/bot mitigation under legitimate interest (GDPR Art. 6(1)(f)).
Layer 4 — Optional Advertising & Consent Management Vendors
By default, Google Consent Mode v2 signals (ad_storage, ad_user_data, ad_personalization, and analytics_storage) are initialized to 'denied'. When display advertising slots are enabled and you grant explicit consent via our IAB TCF v2.2 Consent Management Platform (CMP), advertising partners (such as Google AdSense or Monetag) may set cookies or read device identifiers to serve and measure ads. See our Cookies & Advertising Disclosure for full details.
2. Zero-Consent Utility Guarantee
Declining advertising or analytics cookies (“Reject All”) or using a browser content blocker will never disable, throttle, watermark, or restrict any utility on FetchToolKit. All 12 local browser tools operate with full functionality regardless of your advertising consent state.
3. Your Rights Under GDPR, UK GDPR, and CCPA/CPRA
Depending on your jurisdiction (including the European Economic Area, the United Kingdom, Switzerland, California, and Sri Lanka), you have the right to request access to, correction of, or deletion of personal data, and to withdraw consent for personalized advertising at any time. Because FetchToolKit does not maintain user accounts or store uploaded files, we hold zero copies of the files or text you process in our tools.
For any privacy inquiry, contact our Data Protection point of contact at contact@fetchtoolkit.com.