Privacy Policy

Last updated: July 28, 2026

Your code stays yours

Classic tools run entirely in your browser. The content you paste into them is never transmitted to our servers.

AI tools

When you use an AI tool, the content you submit is sent to our server and to our AI provider (Anthropic) solely to generate your result. We do not use your content to train models, and we do not store it beyond transient logs needed for abuse prevention.

What we collect

If you create an account: your email, name, and plan status. For anonymous AI usage limits: a hashed, non-reversible identifier derived from your IP address. Payments are processed by Stripe; we never see your card number.

MCP FlightCheck

FlightCheck sends a limited set of read-only MCP discovery requests from our server to the public endpoint you choose. The target URL and any temporary authentication header you enter are used to make that scan. Authentication values are kept in request memory only and are not included in reports or analytics. Operational logs may contain the target host, response status, timing, and error category, but not the authentication value. Do not scan an endpoint unless you are authorized to test it.

Local tools and site analytics

Workflow Miner and the AI Tools Lab process pasted or imported content in your browser and do not upload that content. The shared HTMLToolz site shell may still request hosted fonts and, when configured, send page and aggregate interaction analytics. Those analytics do not include the code, configuration, logs, or credentials you paste into local tools.

Browser extension & MCP privacy

The HTMLToolz browser extension and MCP server run their transforms entirely on your device. They collect no browsing data, no page content, no URLs, and include no analytics or tracking. The only network calls they make are (1) a license check to htmltoolz.com/api/v1/me, which sends your API key and returns your plan status, and (2) optional AI tools, which send the text you explicitly submit to htmltoolz.com under the AI terms above. If you never add an API key and never run an AI tool, the extension makes no network requests at all. Extension settings and your API key are stored locally on your device and are removed when you uninstall; account data is retained per this policy. We never sell or share your data.

Contact

Questions? Email support@htmltoolz.com.