Privacy Policy
Last updated: July 2026
1. What we collect
We collect nothing by default. deftools.io does not set cookies, does not use tracking scripts, and does not store any personal data. There are no user accounts, no sign-ups, and no analytics that identify individual visitors.
The site is deployed on Cloudflare Pages. Cloudflare may set its own essential cookies for
security and performance (e.g., __cf_bm for bot management). These are
strictly necessary for the operation of the CDN and are not used for tracking.
2. How your data is processed
All core tool operations — encoding, decoding, formatting, hashing, encryption, image processing, calculations, and text manipulation — happen entirely in your browser using JavaScript. The data you enter never leaves your device for these operations.
A small number of tools make network requests to public third-party APIs to provide lookup and verification features. These are:
| Tool | Third-party API | What is sent |
|---|---|---|
| dns-lookup | dns.google | DNS record lookups (A, AAAA, MX, TXT, CNAME, NS, SOA) |
| domain-brainstorm | dns.google | Domain availability checks via DNS resolution |
| spf-dmarc-generator | dns.google | SPF and DMARC record verification |
| ip-lookup | ipapi.co | IP geolocation (city, country, ISP, ASN) |
| whois-checker | rdap.org | Domain registration WHOIS lookups |
| mac-lookup | api.maclookup.app | MAC address vendor identification |
Additionally, a few tools (ssl-checker, redirect-chain-checker,
sri-hash, robots-txt-checker) fetch URLs that
you provide — they act on your behalf to probe or download resources from
the URLs you specify. No data is sent to us; the request goes directly from your browser to the target server.
3. Third-party data handling
The third-party APIs listed above receive whatever data is inherent in the request — typically the domain name or IP address you are looking up, plus your IP address (as with any HTTP request). Each API operates under its own privacy policy:
- dns.google — operated by Google
- ipapi.co
- rdap.org
- api.maclookup.app
4. Data storage
We do not operate any database, log files, or storage of user-submitted data. No text, files, or configuration you enter into any tool is stored on our servers. The OG image and placeholder image endpoints generate images on the fly and do not retain input parameters after the response is served.
5. GDPR / CCPA
Since we collect no personal data, there is nothing to delete, export, or sell. If you have questions about how a specific tool handles your data, the answer is in the source — every tool is a single HTML page with inline JavaScript that you can inspect in your browser's DevTools.
6. Changes
If this policy changes, the "Last updated" date at the top will reflect the update. We will not notify you individually — check back if privacy matters to you.
7. Contact
Questions or concerns? Email feedback@deftools.io.