Your data,
on your device
The AroraLabs Hub's 174 free tools were built around one constraint: no uploads. Your files, prompts, and inputs never leave your browser. Here's exactly how that works — and what we do (and don't do) with the small amount of data we do collect.
Client-side processing
Hub tools run entirely in your browser using JavaScript + WebAssembly. PDFs, images, JSON, hashes — every byte stays on your device.
No login, no account
Every Hub tool works without sign-in. No usernames, no passwords, no profiles — there's nothing to lose if there's nothing to keep.
Privacy-friendly analytics
Cloudflare Web Analytics counts pageviews without cookies, fingerprints, or cross-site tracking. No Google Analytics across the Hub.
Open inspection
The Hub site is served from Cloudflare and is fully static — view source any time to confirm what runs in your browser.
What we don't do
The shortest list is often the most useful one.
- We don't upload your PDFs, images, JSON, or other files to any server. Period.
- We don't store, log, or have access to anything you type into a tool's input field.
- We don't track you across the internet, fingerprint your device, or set advertising cookies.
- We don't sell, rent, or share any of the data we do collect with third parties.
- We don't require an account, email, or any identifying information to use the Hub.
- We don't run ads inside Hub tools that profile you (we do run a Google AdSense banner — see below).
What we do collect (and why)
Honest list of the data we do touch, why it exists, and how to opt out where possible.
| Data | Why | Where it lives |
|---|---|---|
| Page views (anonymous) | Know which tools are useful, which to improve | Cloudflare Web Analytics (no cookies, no profile) |
| Newsletter signups | Send you occasional updates on new tools and products | Secure cloud database · unsubscribing permanently deletes your record |
| Contact form submissions | So we can reply to your message | Secure cloud database, retained for up to 12 months · Up to 12 months from submission, then deleted |
| Contact form metadata | Understand what device and context the message came from | Stored with the submission — includes timezone, device type, OS, and browser name. See Privacy Policy §4.5 |
| Hub Feedback button | Hear bug reports and feature ideas | Secure cloud database (only if you tap Submit) |
| Local preferences | Remember your theme, recent tools, pins | localStorage in your own browser (you control it) |
| Google AdSense | Helps pay for keeping the tools free | Google's servers · governed by Google's policy |
The full legal breakdown lives at /privacy. This page is the plain-English summary.
How "client-side" actually works
Some examples of what happens when you use specific tools:
PDF Merge / Split / Compress. Your PDFs are read by pdf-lib running as JavaScript in your browser. The merged or split file is generated locally and offered as a download. Nothing is sent to any server.
Background Remover. An ONNX neural network model (~12 MB) downloads once to your browser. The model runs locally via WebAssembly + WebGPU. Your photo is processed in-memory and the cutout returned to you — never uploaded.
Password Generator / Hash / JWT. All cryptographic operations use the browser's built-in SubtleCrypto API. Generated values exist only in the page you're viewing.
Invoice Generator. The PDF is generated by jsPDF in your browser. Your client names, amounts, and line items are never transmitted anywhere — they only land in the file you download.
This applies across all 174 tools. The Hub is intentionally boring infrastructure: a static HTML/CSS/JS site served from Cloudflare's CDN. There's no backend to leak data because there's no backend at all.
Third-party services we use
Full list, no surprises:
| Service | What it does | Required? |
|---|---|---|
| Cloudflare Pages | Hosts the static site + analytics | Yes (infra) |
| Google Cloud Firestore | Stores newsletter signups (until you unsubscribe — deletion is immediate and permanent), contact form submissions (up to 12 months from submission, then deleted), and Hub feedback (up to 6 months from submission) | Only if you opt in |
| Zoho Mail | Sends transactional and newsletter emails on behalf of AroraLabs | Only if you subscribe or contact us |
| Google Fonts | Loads the Inter font family | Yes (display) |
| Google AdSense | Banner ads on the Hub to fund the free tools | Optional (blockers welcome) |
Found a security issue?
We treat responsible disclosure seriously. Email contact@aroralabs.org with the details — we'll acknowledge within 24 hours and credit you in any fix release if you'd like.
Report a security issueLast reviewed: September 2026 · Trust & reliability → · Full privacy policy →