Effective Date: April 18, 2026
Last Updated: May 15, 2026
Favtoo ("we", "us", "our", or the "Operator") is committed to protecting your privacy. This Privacy Policy explains what information is — and is not — collected when you use favtoo.com (the "Service").
Favtoo is operated by an independent individual maintainer who chooses to remain anonymous and is contactable only by email at [email protected]. Favtoo is not a registered company. By using the Service you agree to this Policy and to our Terms of Service; if you do not agree, please do not use the website.
1. Core Principle: No File Uploads, No Server Backend
All file processing on Favtoo happens entirely in your web browser using WebAssembly and the browser's built-in APIs. Files are read into the memory of your browser tab, processed locally, and offered as a direct download. Your file contents are never uploaded to a Favtoo server, because Favtoo does not run an application server — the site is a static site delivered through Cloudflare. When you close or refresh the tab, all file data in browser memory is released.
2. Information We Collect
2.1 Information We Do Not Collect
- Files you process (PDFs, images, video, audio, text, etc.).
- Content or results of file processing.
- Personal identification information (name, email, address) unless you voluntarily send it to us by email.
- Payment or financial information.
- IP addresses or server access logs — we do not operate our own servers and therefore cannot collect them. See section 2.5.
2.2 Analytics (Plausible and Google Analytics 4)
We use Plausible Analytics for privacy-focused, aggregate page-view statistics. Plausible does not use cookies, does not assign a persistent identifier to visitors, and does not store IP addresses. The data we see is limited to total page views, country-level location, referrer, and rough device class — no individual profile is built.
We also use Google Analytics 4 to understand which tools people use and to detect processing errors. GA4 sets a small number of first-party cookies on the favtoo.com domain (_ga and _ga_<id>) so repeat visits in the same browser are counted as the same anonymous user. In addition to standard page views, GA4 records anonymous events when you use a tool — the tool slug, its category, the size of the file in bytes, the processing duration, and (if processing fails) a short error message. File names and file contents are never sent to GA4, because the tools run locally in your browser and the analytics script has no access to the data being processed. Data is retained in GA4 for up to 14 months. For full details on cookies, including how to block them, see our Cookie Policy.
2.3 Advertising
Favtoo does not display advertisements on the site. No advertising network is loaded, no advertising cookies are set, and no ad-personalisation profile is built from your visit. The site is currently sustained by the operator personally. If that changes in the future, this section will be updated and existing visitors will be notified through an in-site banner before any ad network begins serving.
2.4 Local Storage
Favtoo writes a tiny amount of data to your browser's localStorage. Both keys live only on your device and are never transmitted to any server.
cookie_consent— a timestamp recording that you dismissed the "Got it" cookie notice, so it does not reappear on every page load. This stores no preference data.favtoo:workflows:v1— stores the Workflow recipes you save in the Workflows page. The value is JSON describing the steps in each pipeline; file contents are never written to this key.
That is the entire list. You can delete either key at any time from your browser's storage settings or developer tools.
2.5 Hosting / Infrastructure Logs
Favtoo is a static site hosted by Cloudflare. We do not operate our own application servers and therefore do not directly collect or store server access logs or IP addresses. Infrastructure-level logs (typical of any CDN: connection metadata, security telemetry, edge-cache statistics) are governed by Cloudflare's own privacy policy and our hosting agreement with them. We do not have access to those logs in any user-identifiable form.
3. How Information Is Used
The aggregate analytics in section 2.2 are used solely to understand which pages people find useful, so we know which tools to keep maintaining. We never combine analytics events with file content or tool outputs because we do not have access to those.
4. Data Sharing
We do not sell, rent, or trade personal information. The third parties that necessarily receive some technical data when you visit the Service are:
- Cloudflare — as our hosting provider, sees standard HTTP request metadata (e.g., your IP address) for the purpose of serving the page and providing DDoS protection.
- Plausible — receives a cookieless, IP-discarding page-view event.
- Google Analytics 4 — receives anonymous page-view and tool-usage events. Sets first-party analytics cookies (see Cookie Policy). Does not receive file contents or file names.
- Legal requirements — if validly required by applicable law, the Operator will disclose any information actually held (which, given the static-site architecture, is essentially nothing).
5. Your Rights
5.1 Under GDPR (European Economic Area & UK)
You have the right to:
- Access any personal data we hold about you (in practice, none);
- Request correction or deletion of your data;
- Object to or restrict processing of your data;
- Data portability (the workflow JSON is exportable from the UI);
- Withdraw consent at any time — reject the cookie banner, or clear your browser storage for favtoo.com;
- Lodge a complaint with your local supervisory authority.
5.2 Under CCPA / CPRA (California)
California residents have the right to:
- Know what personal information is collected;
- Request deletion of personal information;
- Opt out of the "sale" or "sharing" of personal information — we do not sell personal information and we do not run any advertising network that would constitute "sharing" under CPRA;
- Non-discrimination for exercising privacy rights.
6. Data Retention
Because we do not collect personal data through the tools and do not operate our own servers, there is nothing for us to retain on the server side for tool usage. Local-storage entries on your device are kept until you delete them. Google Analytics 4 retains anonymous usage events for up to 14 months; Plausible retains nothing personal at all.
7. Children's Privacy (COPPA)
The Service is not directed to children under 13 (or under 16 in jurisdictions that apply that age threshold to online services). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please email us so we can confirm there is none and adjust accordingly.
8. Security
The Service is served exclusively over HTTPS with strict-origin referrer policy, Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options headers (see Security). Because files are processed locally in your browser, they are never transmitted off-device, removing an entire class of upload-related breach risk.
9. Withdrawal of Consent
You may withdraw any consent previously given at any time and at no cost — for example by clicking "Reject" in the cookie banner the next time it appears, by clearing your browser storage for favtoo.com, or simply by closing the tab. Doing so will not retroactively affect processing performed before the withdrawal.
10. Severability
If any provision of this Policy is held invalid or unenforceable by a court of competent jurisdiction, the remaining provisions remain in full force and effect.
11. Changes to This Policy
This Privacy Policy may be updated as the site changes. The updated version is published on this page with a new "Last Updated" date. Continued use of the Service after a change constitutes acceptance of the revised Policy. If you do not agree with a future version, please stop using the website.
12. Contact
For questions about this Privacy Policy or to exercise your privacy rights, contact the Operator at:
- Email: [email protected]