Privacy labels

The label is a small icon under the tool’s name, beside the date it was last updated (in an editor, in its top bar), one of the icons below. Point at it to see what it means, or tap it for a short explanation and, where something can leave your device, a note saying what and where to.

The five labels

From most private to least. A label describes who can read your data, not where it is kept: something stored on a server, encrypted so that only your own devices hold the key, is as private as something that never leaves your browser. So “On your device” and “End-to-end encrypted” are the same level.

• On your device81 tools

  Nothing you enter or open leaves this browser.

• End-to-end encryptedno tools yet

  Sent or stored encrypted. Only your devices hold the key, so nobody else can read it, not even us.

  No tool uses this label yet. It is for features where your data has to travel, such as keeping your devices in step or sending a file to a friend, but only your own devices hold the key.

• You choose5 tools

  Stays on your device unless you click to send something to a service you pick; the tool says which.

• Server-processedno tools yet

  Our server reads it briefly to do the work, then deletes it. Nothing is kept.

  No tool uses this label yet.

• Third-partyno tools yet

  A named outside service reads it.

  No tool uses this label yet.

Tools that can send something

These keep your data on your device too, until you do something that sends part of it. Each note says what is sent and where.

Tools that use AI with your own key

Some tools can use AI with your own key. Until you add one, nothing can be sent, so they show “On your device”. Once this browser holds your key, their label changes to “You choose”, and the note says what their AI sends.

• BMI CalculatorWithout AI, everything stays on this device. If you added your own AI key, Ask sends your question (or, for Explain my result, the figures) to that provider. Built-in browser AI keeps it here.
• Mortgage CalculatorWithout AI, everything stays on this device. If you added your own AI key, Ask sends your question (or, for Explain my result, the figures) to that provider. Built-in browser AI keeps it here.
• Percentage CalculatorWithout AI, everything stays on this device. If you added your own AI key, Ask sends your question (or, for Explain my result, the figures) to that provider. Built-in browser AI keeps it here.
• Unit ConverterWithout AI, everything stays on this device. If you added your own AI key, Ask sends your question (or, for Explain my result, the figures) to that provider. Built-in browser AI keeps it here.
• Resume CheckerYour resume stays in this browser. If you added your own AI key, the AI sends it to that provider without your contact details, and shows you the exact text first.
• Time Zone ConverterWithout AI, everything stays on this device. If you added your own AI key, Ask sends your question (or, for Explain my result, the figures) to that provider. Built-in browser AI keeps it here.

Your own AI key is something you add in Settings → AI; without one, the AI features use your browser’s built-in AI, which runs on your device. With one, your text goes from your browser straight to that provider, never through us (see AI features with your own key).

What every page sends, whatever its label

A label is about what you put into a tool. A few things happen on every page, and we would rather say so than claim a page sends nothing at all:

• Anonymous page analytics. Google Analytics counts which pages are visited: the page’s address without anything after the “?” or “#”, never what you type. You can turn it off in Settings → Advanced privacy, and it stays off if your browser sends Global Privacy Control (details).
• Page-speed figures. On the live site, Netlify, our host, measures how fast each page loads: the page’s address without its inputs, your browser type, screen size and load timings (details).
• Loading the page. Like any website, our host sees your IP address and the address you opened (details). Many tools keep their inputs in the address so a result can be bookmarked; if you reload or open such an address, those inputs are part of it. Tools with private inputs, such as health numbers, passwords and your own text, keep them out of the address.
• Forms you send. The contact form and “Send feedback” send what you write in them, when you press Send, and nothing you typed into the tool (details).

Share links carry your inputs

When a tool offers “With my values”, the link holds your inputs, so whoever you send it to sees them, and so can the chat app that shows its preview. Tools about bodies and health start on “Just the page”, and some offer no share link at all. For a couple of tools, our host reads the values in a shared link to draw its preview card. The share buttons are plain links: nothing from X, Facebook or the others loads until you tap one (details).

How the labels are checked

Each tool’s label is written in its source file next to its name, and automated checks run before every release. They fail when:

• a tool has no valid label;
• a tool that can send text to an AI provider with your own key would still say “On your device” once you have added a key;
• a tool whose label changes with a key has any other way to send something;
• a tool labelled anything other than “On your device” has no note saying what is sent and where;
• a tool labelled “On your device” has code that contacts another site.

On top of that, every page carries a Content Security Policy: a list, enforced by your browser, of the only places the page may send data to. You can read it, and watch what a page sends, with your browser’s own tools: verify it yourself. The “On this device” line at the bottom of every page counts what the page has sent since it loaded.

Think a label is wrong? Please tell us, or use “Report a mistake” on the tool.