The short version
Your files never leave your device. Every tool on SiriTools runs in JavaScript inside your own browser tab. Your documents and images are not uploaded, not stored, and never seen by us. You can verify this: open your browser's developer tools, switch to the Network panel, and run any tool — no request carries your file. Each tool page also shows a live counter of file bytes uploaded, which stays at zero.
Separately from your files, this website collects ordinary technical information and serves advertising. That is what the rest of this policy is about.
Who is responsible for your data
This website is operated by SiriTools, a sole proprietorship based in British Columbia, Canada. For any privacy question or request, contact hello@siritools.com.
Under BC's Personal Information Protection Act (PIPA) and under PIPEDA, SiriTools is the "organization" accountable for personal information under its control, and the address above is our designated privacy contact. Under the GDPR, SiriTools is the "data controller".
Files you process — no collection at all
Files you open with a SiriTools tool are read into your browser's memory, processed there, and written back out as a download. Nothing is transmitted to any server. When you close or reload the tab, the file is gone from memory.
We therefore hold no copy of your documents. There is nothing for us to retain, share, sell, disclose to authorities, or lose in a breach. This is a property of how the site is built, not a promise about how we behave.
What is collected automatically
When you visit any website, your browser sends technical information that is needed to deliver the page. Our hosting provider records this in standard server logs:
- Your IP address
- Browser type and version, and your operating system
- The pages you requested, with dates and times
- The site that referred you, if any
This is used to keep the site running and to investigate errors and abuse. We do not use it to build a profile of you, and we do not combine it with anything else.
We currently run no separate analytics product — no Google Analytics, and no third-party statistics tool. If that changes, this policy will be updated before the tool is switched on.
Third-party requests
Loading and using a tool on SiriTools makes no third-party requests. The processing libraries and the web fonts are served from this domain rather than from a content delivery network or Google Fonts, so opening a page does not hand your IP address and the page you are reading to anyone else.
There are exactly two exceptions, and both are named here rather than left for you to find in a network log.
The URL shortener. One tool on this site cannot work in your browser alone: a short link only functions because a server somewhere stores the mapping and answers the redirect. When you use that tool, the web address you type is sent to TinyURL, who create and host the short link under their own privacy policy. Nothing else is sent with it, we keep no record of it, and the tool carries a notice saying so above the input box. Every other tool on this site is unaffected, and no file is ever transmitted anywhere by any of them.
Advertising. Google AdSense loads from Google-operated domains
including googlesyndication.com, doubleclick.net and
adtrafficquality.google. That is described in the advertising section
below. If you use an ad blocker, the tools continue to work normally — they do not
depend on any of it.
Cookies and local storage
SiriTools uses browser storage for these purposes:
- Your advertising choice, if you are shown Google's consent message, is stored by that message so you are not asked on every page.
- Your colour theme — light, dark or follow-my-system — is stored in local storage so the site does not change appearance between visits.
- Carrying a file to the next tool. When you finish a job and follow a suggestion like "Compress it", the finished file is placed in your browser's IndexedDB storage so the next page can pick it up. It is removed as soon as that page collects it, and discarded after ten minutes if you never arrive. This is on your own device and is the mechanism by which the file reaches the next tool without being uploaded anywhere.
- Offline use. A service worker caches the pages and libraries you have visited so the site keeps working without a connection. Your files are never put in that cache.
- Advertising. Google and its partners set cookies to serve and measure ads, described in the next section.
Everything in that list except the advertising cookies stays on your device and is not readable by us. You can clear or block any of it at any time in your browser settings; blocking storage does not stop the tools working, because the tools themselves do not depend on it.
Advertising
This site is supported by Google AdSense. The disclosures Google requires:
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info.
- For more detail, see How Google uses information from sites that use its services.
How consent is handled. Where the law requires it — in the European Economic Area, the United Kingdom and Switzerland, and in US states with their own rules — Google shows its own consent message before personalised advertising cookies are used, and records your answer. That message is Google's, not ours: only a consent platform Google has certified can make a visitor eligible for personalised ads, so running our own banner alongside it would have been a second dialog that could not actually deliver the choice it offered.
If no message is shown to you, you are browsing from somewhere that does not require prior consent, and ads may be personalised using data Google holds about your browsing. You can opt out at any time — for Google, at Google Ads Settings, and for other vendors at aboutads.info. Both links are repeated above because they are the ones that actually work regardless of where you are.
Non-personalised ads, where they apply, are not based on your browsing history or interests. They do still involve a limited amount of data, including cookies or similar identifiers used for frequency capping, aggregate reporting and fraud prevention; Google describes this as restricted data processing. We would rather say that plainly than claim nothing at all is set.
To be clear about the boundary: advertising relates to your browsing of this website. It has no access whatsoever to the files you process here, because those files never leave your device.
Legal basis for processing (GDPR)
- Server logs — legitimate interest in operating the site securely.
- Essential storage — necessary to provide a service you asked for.
- Advertising cookies — your consent, given through Google’s consent message where it is shown, and withdrawable at any time.
Sharing and international transfers
We do not sell your personal information, and we do not share it with anyone except our hosting provider and Google as described above. Because Google operates globally, advertising data may be processed outside Canada, including in the United States, under the safeguards described in Google's own privacy documentation. PIPEDA permits such transfers provided the information remains protected by comparable means, and this paragraph is your notice that they occur.
How long data is kept
Server logs are retained by our hosting provider for a short operational period and then overwritten. Advertising cookie lifetimes are set by Google and described in its documentation. We ourselves keep no user database, because we operate no accounts.
Your rights
If you are in Canada, you have the right to:
- Know why personal information is collected, used or disclosed
- Access the personal information we hold about you
- Challenge its accuracy and have it corrected
- Withdraw consent, subject to legal and contractual restrictions
- Challenge our compliance, and escalate to a regulator if you are not satisfied
SiriTools operates from British Columbia, so BC's Personal Information Protection Act applies to our handling of personal information, and PIPEDA applies to personal information that crosses provincial or national borders in the course of commercial activity. The two are substantially similar, and the rights above are available under either.
If you are in the EU or UK (GDPR), you additionally have the right to:
- Restrict or object to processing based on legitimate interests
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing already carried out
- Lodge a complaint with your national data protection authority
If you are in California (CCPA/CPRA), you have the right to know what is collected, to request deletion, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising. Where Google’s consent message is shown to you, declining in it exercises that opt-out; you can also opt out directly through the Google and aboutads.info links in the Advertising section above, which work from anywhere. We do not knowingly sell personal information for money.
In practice, because we hold no accounts and no file data, most requests concern advertising identifiers held by Google rather than anything on our side. We will tell you honestly when that is the case and point you to the right controls.
Making a request or a complaint
Send any access request, correction or complaint to hello@siritools.com. We aim to respond within 30 days, which is the response period PIPEDA sets for access requests.
If you are not satisfied with our response, you may complain to the Office of the Information and Privacy Commissioner for British Columbia, which oversees PIPA, or to the Office of the Privacy Commissioner of Canada, which oversees PIPEDA. Visitors in the EU or UK may instead complain to their own national data protection authority.
Children
SiriTools is not directed at children, and we do not knowingly collect personal information from them. Because we operate no accounts and build no profiles, we have no mechanism that would meaningfully process a child's personal information.
Security
The site is served over HTTPS. The strongest security measure here is architectural: the sensitive material — your documents — is never transmitted or stored, so it cannot be intercepted or breached on our side.
Changes to this policy
If this policy changes, the updated version will be posted here with a new "last updated" date. Where a material change affects advertising consent, Google’s consent message will ask again rather than carrying an old answer forward.
Contact
Privacy questions and requests: see the Contact page.