Privacy Policy

Last updated: July 21, 2026

1. Information We Collect

Account Information. When you register for an account, we collect your username, email address, and a password hash. Your password is stored as a bcrypt hash and is never accessible in plaintext.

Usage Data. We log basic usage metrics — the type of tool used, file sizes processed, and timestamps — to manage rate limits and improve the Service. We do not log the content of files you upload or download.

First-party funnel events. On primary product pages, we record bounded events such as a page view, tool start, successful tool request, signup, API-key creation, or checkout start. These events contain the event name, page path without its query string, an optional fixed label, and a random browser-session token. They do not contain form contents, file names, prompts, API keys, request bodies, or advertising identifiers.

Session Data. We use session cookies to keep you logged in during your visit. These are strictly necessary for the operation of the Service.

2. How We Use Your Information

3. File Retention & Deletion

Temporary by default. Files submitted to hosted tools are used to perform the requested operation, not kept as a permanent media library.

Uploaded files are deleted immediately after successful processing where the tool permits. For privacy, a recurring cleanup removes remaining temporary uploads and failed-job files after approximately 20 minutes.

Generated/download files are temporary and are automatically deleted after approximately 20 minutes. Under storage pressure, temporary files may be deleted sooner, so download results promptly.

Durable Artifacts are opt-in. We retain a file beyond temporary processing only when you explicitly create an Artifact. Its selected expiry and plan limits are shown when it is created, and you can delete it earlier.

We do not analyze file contents for advertising or build advertising profiles from the media you process.

4. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. We may share aggregated, anonymized usage statistics that cannot identify individual users.

We may disclose your information if required to do so by law or in response to valid legal requests.

5. Cookies

We use a single session cookie (named mediatool.sid) that is strictly necessary for authentication and session management. No tracking cookies, analytics cookies, or third-party cookies are used.

Conversion measurement uses a random token stored in browser sessionStorage. It expires with the browser session and is used only to aggregate the steps in a product journey.

Your theme preference (Modern or Win2K) is stored in your browser's localStorage and is never sent to our server.

6. Third-Party Services

The Service may process URLs that you provide to fetch media from third-party websites (e.g., YouTube, Twitter, Instagram). When you use these features, your request is routed through our server, and the third-party service may log the request as coming from our server. We recommend reviewing the terms and privacy policies of those third-party services.

7. Data Security

We implement reasonable security measures including bcrypt password hashing, session-based authentication with HTTP-only cookies, and file system isolation for uploaded content. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

To exercise any of these rights, please contact us through the Service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact

If you have any questions about this Privacy Policy, please contact us.