Privacy Policy

Last updated: August 8, 2026

This is a plain-language description of how Candid Tools actually handles data, written by the person who built it - not a lawyer. If you need this reviewed for a specific compliance requirement, treat it as a starting draft, not a finished legal document.

The short version

  • 18 of the 19 tools run entirely in your browser. Files you upload, text you paste, images you edit - none of it is sent to a server or stored anywhere. Close the tab and it's gone. The one exception is Todo List, which saves your list in this browser's localStorage so it's there next time - that data still never leaves your device.
  • The one tool that isn't fully client-side is Domain Info: the domain name you look up is sent to our server to run a WHOIS/RDAP lookup, since that's not something a browser can query directly. No other data is collected in that request.
  • We use PostHog for basic product analytics - not to identify you personally or sell data to anyone.
  • An optional Meta (Facebook) ad pixel exists in the code but is off by default. It only gets turned on while we're actively running a Meta ad campaign; when it's off, nothing is sent to Meta.

What we collect, and why

Product analytics (PostHog). Page views, which tools get used, and general technical info (browser, rough location from IP address, referrer). This is used to understand what's actually useful and fix what's broken - not to build an ad profile. PostHog is a third-party analytics provider; see PostHog's own privacy policy for how they handle data on their end.

Advertising (Meta Pixel, off by default). When it's enabled for a campaign, standard Meta Pixel events (page views, ad conversions) are sent to Meta for ad measurement, handled per Meta's own data practices - see Meta's privacy policy for details. It's disabled unless we're actively running a campaign.

Contact email. If you email hello@candidtools.com, that message is received through Amazon SES, the same way any inbox receives mail. We use it to reply to you and nothing else.

Local storage. The Todo List tool keeps your list in your browser's localStorage between visits. That data stays on your device - we never see it, and it's never sent anywhere.

What we don't do

  • We don't upload, log, or store the files, text, or images you process with these tools (the Domain Info exception above is the only case where any input you provide leaves your browser).
  • We don't sell data to third parties.
  • We don't require an account or email to use any tool.

Your choices

  • A browser extension or ad/tracker blocker will block the analytics and pixel scripts without breaking any tool - nothing here depends on them to function.
  • Clear your browser's site data for candidtools.com to remove any saved Todo List entries.
  • Email hello@candidtools.com with questions or requests about your data.

Changes

This page gets updated as the site changes. Meaningful changes (like turning on a new kind of data collection) will update the "last updated" date above.