Private AI Tools

Privacy & cookies

This page explains what happens to your data when you use Private AI Tools. The site is run by gurumedia.it (contact: info@private-ai-tools.com), the data controller for the processing described below.

Your files never leave your device

Every tool runs inside your web browser. Files you open are read and processed by your own device and are never uploaded to our servers or to anyone else. We cannot see them and keep no copy; closing the tab discards them.

How it works

  1. The site is static: pages, scripts, WebAssembly modules and fonts are served as plain files. There is no backend that could receive your files.
  2. When you choose a file, your browser reads it into memory. The tool processes it there, on the page itself or in a background worker, with WebAssembly and, for AI tools, WebGPU when your browser supports it.
  3. Results are created on your device and saved through your browser's normal download. Nothing is sent back to us.

Every network request, and why

These are the only servers your browser contacts while you use the site:

  • This site. Pages, code, fonts and other static files. The site is hosted by Hostinger (Hostinger International Ltd, Cyprus, in the EU), which acts as our data processor and, like every hosting provider, may keep short-lived server logs (IP address, browser, pages requested) for security and operations.
  • Hugging Face (huggingface.co), AI tools only. The first time you use an AI tool, your browser downloads the open-source model files (not your data), pinned to a fixed version; Hugging Face may deliver them from its download servers under hf.co. The browser then keeps them in its cache, so they are not downloaded again. Hugging Face receives a normal web request, including your IP address.
  • OpenFreeMap (tiles.openfreemap.org), map viewer only. The GIS viewer loads background map tiles (OpenStreetMap data) for the area you look at. Your own map files are never sent, and with “No basemap” no tiles are loaded.
  • Your browser's online voices, Text to Speech only. The AI voices run on your device. If you choose one of your browser's own voices marked “online” (such as Google voices in Chrome or Microsoft Natural voices in Edge), your browser sends the text to that company's servers to speak it. The tool marks these voices and prefers one that stays on your device.
  • Google, only when ads are on. Ads are currently off, so no advertising or consent script is loaded. If we turn them on, they will load from Google's servers as described under Advertising below.
  • Content you ask for. A few tools can load web content from addresses you provide, only after you turn it on: for example remote images in the Markdown editor or HTML to PDF. Links you click take you to other websites, as on any site.

Nothing else: no analytics or tracking scripts from other companies. The site counts its own visits, without cookies: see “Visit statistics” below.

Visit statistics

To know which pages and tools are used and how well they work, the pages you open send this site short requests. A page view sends the page address, your browser's language, whether your window is phone, tablet or computer sized, the width of your screen, your time zone, whether you prefer dark mode and whether your browser supports WebGPU; for the first page you open, also the website you came from (its domain only, such as google.com) and the link's campaign tags, if any (utm_source, utm_medium, utm_campaign). Other requests say only what happened on the page: a file was opened in a tool (never the file, its name or its content), a result was downloaded (and how many files), an error message was shown (never its text), a JavaScript error occurred (only its type, such as TypeError), a partner link was clicked (which offer), how long the page was visible and how far you scrolled, and page speed measurements (Web Vitals). The server derives the country from the time zone (never from the IP address) and the browser and system family from your browser's user agent (such as Chrome on Android), and notes the hour of the visit. To count unique visitors without cookies, it computes a fingerprint: a hash of your IP address and browser combined with a random value that changes every day. The IP address and the user agent are never stored; the previous day's random value is deleted, so the fingerprint can't be reversed or linked across days. During the day the fingerprint groups your pages into visits (start and end time, number of pages, first and last page, where you came from); the next day these rows are deleted and only daily totals remain, kept indefinitely. Like any request, these may appear in the hosting provider's short-lived logs described above. The legal basis is our legitimate interest in understanding and improving the site. If your browser sends Global Privacy Control or Do Not Track, nothing is sent.

AI assistants (MCP server)

If you add our MCP server (https://private-ai-tools.com/mcp) to an AI assistant, the assistant's servers send ours the words it searches for, and the tool or category it asks about, to find matching tools. We use the words only to answer and never store them; they travel in the body of the request, not in its address. We only count, in daily totals, how many times each of the server's methods and tools is called (such as find_tools), the language chosen for a search, whether it found any tools and the name the assistant's app gives itself (such as claude-ai). Like any request, it may appear in the hosting provider's short-lived logs described above. The server returns only tool names, descriptions and links and never receives files. What you write to the assistant is covered by its provider's privacy policy.

Library telemetry is blocked

Some open-source libraries report usage statistics by default. MediaPipe, which the passport photo maker and face swap use to find faces, sends anonymous usage data (task type, timings, operating system) to Google every minute. We answer those requests inside your browser with a refusal, so nothing is sent and the library stops trying. Libraries that would fetch code or fonts from public CDNs are set up to load them from this site instead.

Check it yourself

  • Under every tool, a “Local processing” indicator lists the servers the page has contacted, why, and how many uploads it has made: zero. It watches the page itself; requests made inside background workers (such as AI model and map tile downloads) are visible in your browser's developer tools.
  • For the full picture, open your browser's developer tools (F12, or Cmd+Option+I on a Mac), select the Network tab and use a tool: you will see only the requests listed above, and none of them carries your file.
  • Or go offline: use a tool once (for AI tools, until the model has downloaded), then turn off your connection and use it again in the same tab. Most tools keep working, because they don't need the network to process your files.

Advertising

No advertising scripts are currently loaded on this site.

Affiliate links

Some tool pages show “Recommended” products marked as sponsored. If you follow such a link and buy something, we may earn a commission at no extra cost to you. We do not share any data with the partner; once you are on their site, their own privacy policy and cookies apply.

Cookies and local storage

Private AI Tools itself does not use tracking cookies. Some tools remember your settings or drafts in your browser's local storage, and AI tools keep downloaded models in the browser's cache. All of this stays on your device, and you can clear it in your browser settings.

Your rights

Under the GDPR you can ask for access to, correction or deletion of personal data about you, object to processing and withdraw consent at any time. Because tool files are never uploaded, we hold no copy of them. For advertising data contact Google through the links above. For anything else, write to the address above. You can also complain to your local data protection authority.

See also: About · Open-source credits