Privacy Policy
At OctalOne, transparency is not an afterthought—it is the foundation of everything we build. Our tools run directly in your browser, your files never leave your device, and our analytics are strictly limited to anonymous, aggregate metrics.
Last revised: September 12, 2026 • Policy Version 2.1
At-a-Glance: Direct Answers to Your Privacy Questions
We believe in direct, unambiguous answers. Here is a clear summary of how OctalOne treats your privacy:
NO. OctalOne has no user accounts, no login portals, no email subscriptions, and no contact forms requiring an email. We have zero access to your email.
NO. All visitors are 100% anonymous. PostHog is configured with person_profiles: 'identified_only', meaning no profile is ever created for site visitors.
NO. We cannot access your hardware IDs, MAC address, IMEI, disk storage, or private files. We only receive high-level responsive browser telemetry (e.g., "Chrome on Desktop" or viewport size) standard to HTTP web requests.
NO. 100% of tool operations (PDF compression, image conversion, code formatting, calculations) execute locally in your browser RAM. Your files never touch our servers.
NO. Session recording in PostHog is explicitly disabled (disable_session_recording: true). We do not record video, heatmaps, or keystrokes.
NO. We do not sell data to advertisers, data brokers, or marketing partners. We do not run third-party advertising retargeting pixels.
1. Core Architecture: 100% Client-Side Processing
Traditional online utility sites upload your files to remote servers for processing, which exposes your private documents, photos, bank statements, or confidential code to server-side data retention and breach vulnerabilities.
OctalOne works fundamentally differently: Our tools run 100% locally in your web browser using modern WebAssembly (Wasm), HTML5 Canvas, Web Workers, and pure JavaScript.
Your PDFs, images, text, and data never leave your local machine or phone.
Processing occurs in temporary browser RAM. Closing the browser tab destroys the data.
Our Service Worker caches the tools so you can run them with zero internet connection.
2. Analytics & Performance Monitoring
To maintain site reliability, identify broken features, measure page load speeds, and understand which tools are most useful to students and developers, we have integrated two privacy-conscious analytics services: Google Analytics 4 and PostHog.
Google Analytics 4 (GA4)
Property ID: G-43EW5M7MRKGoogle Analytics is provided by Google LLC. We use GA4 solely to measure aggregate traffic volume and website reach.
What Google Analytics collects:
- Aggregated page views (which tool URLs are visited and total visit counts).
- General referral sources (e.g., whether you arrived from Google Search, direct link, or a forum).
- Broad geographic location (approximate country and city derived from masked IP addresses).
- General device and browser metadata (e.g., Desktop vs. Mobile, Chrome vs. Safari, screen resolution).
PostHog Product Analytics
Reverse Proxy Ingestion: /ingestPostHog is an open-source analytics platform. We route PostHog telemetry through a first-party reverse proxy (/ingest) to minimize third-party cross-site leakage.
- Session Recording is Disabled:
disable_session_recording: trueis explicitly enforced. PostHog never records your screen, video, mouse trails, or keystrokes. - No Anonymous Person Profiles:
person_profiles: 'identified_only'is enabled. PostHog does not compile behavioral dossiers or personal identity histories on our visitors.
What PostHog collects:
- Aggregated UI interaction telemetry (e.g., count of clicks on "Compress", "Download", "Copy", or tab changes to identify broken controls).
- Route transition timings (
$pageviewand$pageleave) to monitor site speed and navigation performance. - Diagnostic error logs (e.g., if a browser script encounters an unhandled exception or memory limit).
3. Transparency: What We CAN Do vs. What We CANNOT Do
- ✓See aggregate traffic trends (e.g., "5,000 visitors used the PDF Merge tool this week").
- ✓Detect broken buttons, client script crashes, or unsupported browser engines.
- ✓Understand which device screen sizes visit to optimize responsive mobile layouts.
- ✓Determine high-traffic regions to optimize Cloudflare edge server caching.
- ✕We CANNOT see, store, or track your email address, phone number, or real-world name.
- ✕We CANNOT view, intercept, or upload your files, photos, PDFs, code, or inputs.
- ✕We CANNOT record your screen, video sessions, or watch what you type.
- ✕We CANNOT sell, rent, or trade your usage data to advertisers, data brokers, or third parties.
- ✕We CANNOT fingerprint or access your physical device hardware, local hard drive, or private files.
4. Adblockers, Brave Shields & Offline Operation
We fully respect user privacy preferences, browser privacy protections, and network filtering tools:
- Adblockers & Privacy Shields: If you use extensions such as uBlock Origin, AdGuard, Privacy Badger, or browser-native features like Brave Shields, our site and tools will continue to work flawlessly. Because our tools operate 100% locally in your browser, no feature requires analytics scripts to execute.
- Do Not Track & Global Privacy Control: We honor Do Not Track (DNT) and Global Privacy Control (GPC) signals transmitted by your browser.
- 100% Offline Capability: Once loaded, tools can run completely offline in airplane mode or on isolated corporate intranets with zero network traffic.
5. Cookies & Local Browser Storage
OctalOne uses minimal local browser storage (localStorage and functional cookies) solely to maintain your user preferences across visits:
| Storage Key | Type | Purpose |
|---|---|---|
| theme | localStorage | Stores your selected Light or Dark mode color preference. |
| recent_tools | localStorage | Stores your recently accessed tools locally on your device for the quick-access dock. Never uploaded. |
| _ga, _ga_* | Cookie (Google) | Pseudorandom anonymous session identifier used by Google Analytics to distinguish unique page visits. |
| ph_* | localStorage / Cookie | Anonymous session token used by PostHog for aggregate UI metrics. |
6. Third-Party Infrastructure & Services
OctalOne is hosted on Cloudflare Pages. When you request a webpage, Cloudflare processes standard HTTP request headers and IP addresses strictly for DDoS mitigation, edge routing, and network security.
For more information on our infrastructure partners, please review their respective privacy policies:
7. Data Retention & Children's Privacy
Because OctalOne maintains no database of user identities, no personal data is retained on our servers. File processing data exists solely in transient browser memory (RAM) and is purged immediately when you close or refresh your browser tab.
OctalOne does not knowingly collect or solicit any personal information from children under the age of 13. If you believe any minor has provided personal information to us, please contact us immediately so we can investigate and remove any associated records.
8. Contact Us Regarding Privacy
If you have any questions, suggestions, or concerns regarding our privacy practices, or if you wish to verify client-side processing techniques, please visit our Contact Us page or read our architectural guide on Why Privacy Matters.