Security at tooldu.com
Where your files stay, what reaches the server and what to check before sharing a result.
Browser-based toolsFiles processed on your device
FILE AND ACCOUNT SAFEGUARDS
How your files and account are handled.
Here is where the work happens, what information goes to the server and what to check before sharing a result. These details describe the current service; they are not a promise that every file or device is risk-free.
See how your documents are handledYour device. Your documents.
Choose file→Local tools→Download
No document server uploadUpdated 1 November 2026
CLEAR INFORMATION. BETTER DECISIONS.
How tooldu.com handles security.
Practical safeguards for the features you use.
Where file processing happens
PDF, Word, image, audio and video tools run on your device. The tooldu.com backend does not receive those files for processing. Your browser may download fonts, codecs and image models. If you open a remote file URL, your browser contacts that host. Feedback images are a separate upload, sent only when you submit feedback.
Work in progress and local copies
Open files and previews use browser memory. Continuing into another tool can create a temporary IndexedDB copy on your device. It expires after ten minutes and is deleted when consumed; old copies are checked and cleaned during later handoffs. Closing the tab does not clear every kind of browser storage. Download results and keep an original copy.
Connections to the site
The public site uses HTTPS, and public HTTP requests redirect to HTTPS. Account, support and checkout requests use those connections. Local processing is not an encrypted backup service or an end-to-end encrypted cloud vault. Use a trusted device and an up-to-date browser, especially for sensitive files.
PDF passwords, signatures and redaction
Lock PDF applies AES-256 opening-password encryption locally. Unlock PDF needs the known password and does not crack passwords. File passwords stay in the tab or local worker and are cleared after successful processing. Visual signatures are marks, not proof of identity. Verify Signature checks supported detached CMS signatures, without establishing certificate trust, revocation or legal authority. Redact PDF creates a fresh rasterised document with selected pixels overwritten; original text streams, forms, attachments and metadata are not copied into that output. Check every page before sharing it.
Administrator access
The administrator has a separate login from member accounts. Passwords use salted hashes, and sessions are checked on the server. HTTPS administrator cookies are Secure, HttpOnly and SameSite=Strict, with a maximum twelve-hour lifetime. Sign-out revokes the session; a password change revokes existing sessions. Origin checks and attempt limits help protect administrative requests.
Account and trial access
You get 30 minutes to try the tools that need access, without creating an account. Once that window ends, wait at least one hour before starting another. Opening an eligible trial tool starts the next window. Time keeps running while you are away. The nine free tools have no session timer. Clearing cookies or browser data does not restart the timer on the same public IP. People on the same Wi-Fi or shared network may therefore share a window and its waiting period. We cannot reliably recognise an unregistered visitor who changes both cookies and public IP. Signed-in accounts use their own access rules. A registered account has its own 30-minute window every three hours, measured from the previous start. The same window follows your account across devices. Idle time counts, and unused minutes do not carry over. Anonymous network identifiers are keyed hashes, not raw IPs or browser fingerprints. Member passwords use salted PBKDF2 hashes; random recovery codes are stored as hashes. Password reset rotates the recovery code and revokes member sessions. Paid time is credited only after a matching captured Razorpay payment is verified.
Messages and screenshots
Contact messages go to a private administrator inbox. Tool Feedback also sends its page and language, plus the image you choose to submit. Feedback images are limited to 2 MB and can be deleted separately by an administrator. Messages and images are retained for up to 90 days unless deleted sooner. Do not send passwords, card details or confidential file contents. Account Contact and Notification messages stay in the private account service; no SMS is sent.
Results still need a review
Fonts, encodings, scans, codecs and memory limits can affect output. Supported PDF text edits try to preserve the source font and text state; unsupported text may remain read-only. OCR can misread characters. Colourisation and enhancement can infer or alter details, and background or object removal may need manual correction. Keep the source and compare the exported result rather than relying on a preview alone.
Google services and optional measurement
Optional first-party traffic reports and Google Analytics depend on consent and detected privacy signals. Built-in AdSense ads also depend on consent, configuration and region. A standard Tag Manager container can contact Google before a choice, with storage denied, and its noscript iframe may contact Google when JavaScript is disabled. Its tags also need to respect consent. Document contents and filenames are not included in tool activity or first-party traffic reports. The Cookie and Privacy pages explain the separate retention periods and choices.
Manage optional servicesCHECK BEFORE SHARING
Some edits do not remove the underlying information.
Crop hides content outside a page box, and whiteout covers content visually. Neither is permanent redaction. The dedicated Redact PDF tool permanently overwrites selected regions in a fresh rasterized document. Visual signatures are images, not cryptographic proof of identity. Watermark cleanup cannot reconstruct hidden material, and image cleanup creates raster pages. Keep the original and review downloaded files in a trusted reader before sharing them.
Use a trusted reader to check exported files. No automatic malware-scanning service or independent security certification is provided by this page. If a result looks wrong, stop using it and contact support with a non-sensitive example.
Report a security concern
Use the contact form and choose a security subject. Include the page, approximate time and steps to reproduce, with sensitive details removed. The administrator reviews the private inbox; this is not an emergency channel and no response deadline is promised.
Report a concern