privacy.

You keep your files. We keep our word.

The short versionWe do not upload your files. We do not require an account. We do not sell your data. We optionally load a privacy-friendly analytics script (Plausible) that counts page views without cookies or personal data. You can turn it off in one click.

What we do not collect

Your files — every tool runs client-side. Images, PDFs, JSON, tokens, hashes, everything is processed in your browser and never sent to any server we run.
Your name, email, phone number, address — there is no signup form to collect them into.
IP address logs, session IDs, tracking cookies — Plausible operates without any of these.
Behavioral data for advertising, retargeting, or resale — there are no ads on this site.

What we might collect (opt-out available)

Plausible analytics — anonymous page-view counts. No cookies. No IP storage (they hash and discard). No cross-site tracking. Open source and independently audited. Toggle it off in the floating ⚙ settings panel — that immediately stops the script from loading on future visits.
Cloudflare edge — the site is hosted behind Cloudflare, which sees the same request metadata (IP, User-Agent, path) any host sees. Cloudflare's privacy policy applies to that layer. We do not access those logs.

What is stored in your browser

We use localStorage and IndexedDB on your device — never uploaded — for:

Theme choice (light/dark) — napTools_theme
Analytics toggle state — napTools_noTrack
Pinned tools — napTools_pinned
Recipes (saved tool chains) — napTools_recipes
Recently used tools list — napTools_recent
Cross-tool file transfer buffer (nap-pipe) — IndexedDB, cleared after receive
Cached AI model weights (when you use watermark-remover AI mode, cutout, or tagger) — Cache Storage, persistent until you clear site data

You can clear all of this at any time via your browser's site data controls or the "Clear PWA cache" action in the ⌘K command palette.

Third-party assets

Some tool pages load JavaScript libraries from CDNs (jsDelivr, Cloudflare, esm.sh) or model weights (HuggingFace for the AI tools). Those hosts see the request. They do not receive any of your file content — only the URL of the library or model. All script tags use Subresource Integrity (SRI) hashes to prevent tampering.

Rights + contact

Since we do not collect personal data, there is nothing for us to export, correct, or delete on your behalf. For questions or concerns, reach out via napdesigns.com.

Changes

If this policy ever changes we will note it here with a new date and describe what changed. If a future change materially affects users we will announce it on the hub before it takes effect.

Last updated: 2026-07-30