Privacy Policy

The short version

Every conversion and calculator tool on TheHandyKit runs entirely in your browser. When you drop a file into a tool, it's processed on your own device using JavaScript libraries (Canvas API, pdf-lib, pdf.js, heic2any) — it is never uploaded to, or seen by, any server we operate. We have no way to access the files you process, because they never leave your computer or phone.

What we do collect

Most of TheHandyKit requires no account and collects nothing. The exceptions are:

• Your email address, only if you subscribe to TheHandyKit Pro. It's used to create a Stripe customer record and to look up your subscription status — nothing else.
• Payment details are handled entirely by Stripe, our payment processor. We never see, receive, or store your card number.
• A small number of cookies and local browser storage entries: a secure session cookie (thk_session, HttpOnly, unreadable by page scripts) that identifies you as a Pro subscriber; localStorage entries for your theme, language, and a temporary cache of your subscription status (this cache is always re-verified against our server in the background and self-corrects within about a minute if tampered with — it is never the source of truth).
• Your IP address is processed transiently by Cloudflare (our hosting provider) as part of ordinary web traffic, and briefly by our own rate-limiting logic when you request a subscription-restore email, to prevent abuse. It is not stored long-term or linked to your identity.

Third-party services we use

• Stripe — payment processing and subscription billing for TheHandyKit Pro.
• Resend — sends the "restore my Pro subscription" sign-in email, only when you request it, only to the email address you provide.
• Cloudflare — hosting, DNS, and content delivery for the entire site.
• Google AdSense — TheHandyKit may show ads served by Google. Google and its advertising partners may use cookies to serve ads based on your visits to this and other websites. You can review or opt out of personalized advertising at Google's Ads Settings. Where the law requires it (the EEA, the UK and Switzerland), Google's certified consent management tool asks for your choice before any personalized-advertising cookie is set, and you can change that choice later through the same tool. Google's own explanation of how it uses data from sites that use its services gives more detail.

What we never do

• We never upload, read, or store the contents of any file you process with a tool.
• We never sell your data to anyone.
• We never require an account, username, or password to use any free tool.

Your rights and choices

You can cancel your Pro subscription at any time from the "Manage subscription" link on the Pro page, which opens Stripe's billing portal. To request deletion of your subscriber record entirely, or to ask any question about this policy, contact us using the address below. Clearing your browser's cookies and local storage removes all locally stored preferences immediately.

Changes to this policy

If this policy changes in a way that affects what data we collect or how we use it, we'll update the date at the top of this page.

Contact

TheHandyKit is a product of WhoOwn.it. Questions about this policy: privacy@thehandykit.com