Privacy Policy

Last updated: January 2026

At Armytool, privacy is not a feature we bolted on after the fact. It is the foundational design principle that shapes every tool, every page, and every line of code we publish. This Privacy Policy explains in clear, plain language what data we collect, what data we never collect, how we handle the limited information that does flow through our service, and what rights you have over any information that touches our systems.

We encourage you to read this document end to end. It is intentionally thorough because we believe informed users are empowered users. If anything in this policy is unclear, please reach out via our contact form and we will gladly clarify.

1. Introduction and Scope

This Privacy Policy applies to the website located at www.armytool.site (the "Site"), all subdomains, and any related services operated by Armytool (collectively, the "Service"). By accessing or using the Service, you agree to the terms set out in this policy.

Armytool is a privacy-first utility platform for developers, IT professionals, and everyday users. Most of our tools run entirely inside your browser. This means the data you process — passwords, JSON, tokens, files, images, text — generally never leaves your device. Where this is true, there is nothing for us to collect, store, or hand over to third parties. Where it is not true, we tell you explicitly below.

This policy is written to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and equivalent privacy frameworks around the world. If you are located in the European Economic Area, the United Kingdom, or California, you have specific rights summarized in Section 9.

2. Information We Do Not Collect

We want to start with what we do not do, because most privacy policies bury this information:

• We do not log or store the data you process in our tools. Whether you generate a token, validate a JWT, format a JSON document, hash a password, or convert an image, the input and output remain in your browser. No copies are kept on our servers, in logs, or in backups.
• We do not require an account. There is no registration, no email capture, no profile, and no password tied to your use of Armytool. Anonymous use is the default.
• We do not sell your data. Period. We have never sold user data, and the design of the platform makes it impossible to do so for the vast majority of our tools.

3. Information We Do Collect

Despite the privacy-first design, a small amount of information is necessarily collected to operate the Service:

3.1 Server Logs

Like virtually every website on the internet, our hosting provider records basic request information when your browser fetches a page. This typically includes your IP address, the requested URL, the response status code, the user-agent string, and a timestamp. These logs are kept for a maximum of 30 days and are used solely for security monitoring, abuse prevention, and capacity planning. They are never linked to a user profile because we have no user profiles.

3.2 Cookies and Local Storage

We use a minimal set of cookies and local storage entries to remember your preferences (such as dark mode and language selection) and to support the optional installable app feature. Section 3 covers cookies in detail.

3.3 Third-Party Advertising

We display non-personalized advertisements served by Google AdSense to support the free availability of the Service. Google may set cookies or read identifiers from your browser to deliver these ads, measure their performance, and prevent fraud. You can opt out of personalized advertising at any time by visiting Google Ads Settings.

3.4 Third-Party Analytics

We use privacy-respecting analytics to understand which tools are popular, which pages load slowly, and where users encounter errors. We prefer tools that do not require consent banners, but if the analytics provider we use does collect personal data, we configure it to anonymize IP addresses and disable advertising features.

4. Client-Side Processing

The single most important architectural decision we have made is to keep the vast majority of our tools client-side only. This means:

• Your passwords never reach our servers.
• Your tokens never reach our servers.
• Your personal documents never reach our servers.
• Your IP addresses, credit card numbers, API keys, and any other sensitive input never reach our servers.

The trade-off is that some tools that require server resources (for example, a tool that needs to call an external API to validate a phone number) will, by necessity, send the relevant data to that third-party API. In every such case, we surface this fact clearly inside the tool itself before the request is made, and we link to the third party's privacy policy.

5. Children's Privacy

Armytool is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, please contact us and we will delete it promptly.

6. International Data Transfers

Our hosting provider operates data centers in multiple regions. Depending on your location, your requests may be served from a region outside your home jurisdiction. By using the Service, you acknowledge that your information may be transferred to, stored in, and processed in countries other than your own. We rely on standard contractual clauses and equivalent legal mechanisms where required.

7. Data Security

We implement industry-standard technical and organizational measures to protect the limited data we do collect. These include HTTPS everywhere, principle-of-least-privilege access controls, regular dependency audits, and a small team with administrative access. No system is perfectly secure, but we design ours to fail closed: even if a log file leaked, it would not contain the data you processed in our tools, because we never receive that data in the first place.

8. Third-Party Services

The Service relies on a small number of third-party providers to function. Each one has been selected with privacy in mind:

• Hosting provider — serves the Site over HTTPS.
• Google AdSense — displays advertisements.
• Analytics provider — measures aggregate usage.
• CDN — delivers static assets quickly worldwide.

Each provider processes data according to its own privacy policy. We encourage you to review those policies.

9. Your Rights

Depending on where you live, you may have the right to:

• Request access to the personal data we hold about you (typically: nothing).
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to processing or withdraw consent.
• Lodge a complaint with a supervisory authority.

Because we collect so little, most of these requests will result in a confirmation that there is no data to provide or delete. To exercise any of these rights, please contact us via the form linked in the footer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material, we will announce them more visibly through a banner on the Site. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please reach out via our contact form. We aim to respond to all privacy-related inquiries within 30 days.