Privacy & Trust

What stays on your device, what is sent to the server, and how to control locally stored data.

Tool inputs stay local

Tool calculations run in your browser. Text, files, measurements, and generated results are not uploaded by the tool pages. Static pages and tool-status metadata are fetched from this site, but tool inputs are not included in those requests.

No analytics profile

Virtual Tools does not use advertising trackers or analytics. Favorites, recent tools, usage counts, view preferences, and theme choice are browser-local and are not sent to the server.

Methods and limits are visible

Each public tool shows its review status, method, sources, and recorded test count. When extra care is warranted, the page gives concise guidance about what to verify before acting.

Browser-local data

The application may use the following localStorage keys. Storage is scoped to this site and remains in this browser profile:

vt-theme
Your light or dark theme choice.
vt-view
Your last catalog view.
vt-favorites
Slugs of tools you starred.
vt-recent-tools
Up to 20 recently visited tool names, slugs, and visit times.
vt-tool-usage
Per-tool visit counts used only for “Your most used.”
vt.feedback.ids.v1
Up to 20 feedback bearer IDs saved so you can revisit replies. Anyone with an ID can read that submission.

Active search text can also be kept temporarily in sessionStorage so Back navigation restores the catalog. It normally disappears when the tab session ends.

Feedback is the exception

Submitting the feedback form sends the selected kind, optional tool slug, and message to the feedback service. Do not include passwords, medical records, financial account data, or other secrets. A random UUID is returned as the bearer-style key for checking the response.

Feedback becomes eligible for automatic deletion after 365 days by default; the operator can configure a different period. Cleanup is periodic and bounded, so removal can occur later under a large backlog. The service keeps no name or email field. Privacy-preserving rate limiting stores a keyed client token instead of the raw network address; expired one-hour-window counters are purged by later rate-limited activity.

Normal infrastructure may record operational events needed to run and secure the service. Feedback API access logging is disabled so UUID lookup paths and raw client addresses are not retained in application access logs.

Open the feedback form

Offline app storage

The optional service worker pre-caches only the shared application shell. It can keep a bounded set of static assets and tool pages you visit. It never caches API responses, feedback routes, tool trust/status records, the canonical catalog, or URLs containing query parameters. Tool HTML is checked against the network first so releases do not remain stale.

Checking offline storage…

Limits and reporting

“Reviewed” describes the recorded project review state, not professional certification. When a result could affect an important decision, follow the tool’s verification guidance and consult authoritative sources or qualified advice as appropriate. Use the issue link on any tool page to report incorrect formulas, inaccessible controls, unsafe behavior, or unclear assumptions.