Zap.Tools
Privacy

Privacy Policy

Last updated: August 31, 2026

This page explains exactly what data Zap.Toolscollects when you use Zap.Tools, what we do with it, and what we don't do. We aim for radical clarity: if any part of this is ambiguous, email hello@zap.tools and we'll fix it.

The short version

  • No user accounts. No login required, ever.
  • We never fingerprint you, and we build no profile of you ourselves. Cookies are set, by Google Analytics and by Google AdSense; both are described below.
  • The site is funded by Google AdSense. Google is the one third party with any view of your visit, and it may set cookies to serve and measure ads. What that covers, and how to turn the personalised part off, is spelled out in Advertising below.
  • Nearly every tool runs entirely in your browser; your files never reach a server.
  • The few tools that fetch a URL on your behalf do so through a single audited proxy that does not log request payloads.
  • Privacy-respecting, cookie-free analytics may be used to count anonymous page views. No personal data is collected.

What stays in your browser

The overwhelming majority of Zap.Tools runs entirely in your browser. This includes (non-exhaustive):

When a tool says "runs in your browser", that's literal. There is no upload, no temporary server-side cache, no processing queue. The data you paste, drop, or upload stays on your device.

When a request reaches our servers

A small number of tools need to fetch a public URL to do their job: checking HTTP headers, validating a schema, previewing a social card, because the browser can't do that directly due to CORS. In those cases, your browser sends the target URL to our backend, which forwards the request, returns the result, and discards everything. We retain only aggregated, non- identifying metrics (response status, byte count, request duration) so we can monitor service health. The target URL, response body, and your IP are not stored.

These endpoints enforce strict SSRF protection (no private, link-local, or internal addresses), response size caps, hard timeouts, redirect limits, and per-IP rate limiting.

Cookies and local storage

Zap.Tools uses a small amount of local storage on your device to remember non-personal preferences (e.g. dark mode). That data never leaves your browser and is not a cookie.

Cookies are set, and we would rather list them than wave at them. Both come from Google rather than from us directly:

  • Google Analytics sets first-party cookies (named _ga and _ga_ followed by an identifier) so that repeat visits can be recognised and traffic counted.
  • Google AdSense may set its own cookies, or read device identifiers, to serve ads and to count how often an ad was shown.

We cannot read either set. What reaches us is the aggregate report Google shows us, not your individual browsing. Both are covered by the consent prompt described under Advertising.

Analytics

We use Google Analytics, and only Google Analytics. It sets first-party cookies to recognise repeat visits, and it processes your IP address to derive an approximate location. That data goes to Google. This is the part that requires your consent in the EEA, the UK, and Switzerland, and it is covered by the same prompt as advertising.

What it measures is which pages get opened and roughly where from. It cannot see inside a tool. What you paste, drop, or upload is not measured, not sampled, and not transmitted.

Advertising

Zap.Tools is free and has no paywall, no accounts, and nothing to upsell. It is paid for by advertising through Google AdSense. We would rather say that plainly than bury it.

Google, as a third-party vendor, uses cookies to serve ads on this site. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to Zap.Tools and other sites on the internet. Google may also use your approximate location, derived from your IP address, and your device and browser information.

You can opt out of personalised advertising by visiting Google Ads Settings. You can opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info. Google's own terms are set out in the Google privacy and terms page.

In the EEA, the UK, and Switzerland, personalised advertising and analytics cookies require your consent. Google collects and records that choice through its own consent prompt, and the same prompt is where you change or withdraw it later. Without your consent, no personalised advertising cookie is set and any ads you see are non-personalised. Refusing does not restrict a single tool on this site: everything here works identically either way.

What advertising does not change: the content you paste, drop, or upload into a tool is still never sent to an advertiser, or to anyone else. Client-side tools remain client-side. Ads are chosen from the page you are on, not from what you put into it.

Third parties

The site is delivered through Cloudflare, which may process request metadata (IP, user agent) for routing, certificate negotiation, and abuse prevention, governed by Cloudflare's own privacy policy. Web fonts are loaded from Google Fonts at build time and served from our own origin where possible.

Google serves the advertising described above, and is the only third party that receives anything about your visit for its own purposes. There are no other ad networks, no data brokers, no social media pixels, and no session recording.

Your rights

We hold no personal data about you, so there is nothing for us to hand over, correct, or delete: no account, no profile, no stored file. Advertising data is held by Google rather than by us, so requests about it go to Google, and the opt-out links in Advertising are the fastest route. If you believe this page is factually wrong about a specific feature you encountered, please email hello@zap.tools and we will investigate.

Changes to this policy

Substantive changes will bump the "Last updated" date at the top of this page. We may also surface a banner on the site for material changes.

Contact

For privacy questions, email hello@zap.tools.