Privacy Policy

Short version

Utilito is designed to be privacy-friendly. Most tools run directly in your browser, which means the text, files, images, PDFs, or calculations you enter do not intentionally leave your device. API calls and network lookup tools are different: they process the input you intentionally send to a server or external data source.

Browser-based tools

Standard web tools such as formatters, converters, calculators, generators, image utilities, and PDF utilities are built to run locally in the browser where practical. The page may use browser APIs such as Canvas, FileReader, Web Crypto, local JavaScript, or client-side libraries to produce output.

Local processing does not make every input risk-free. Browser extensions, your network, your device, and copied output are still outside Utilito’s control. Avoid pasting secrets into any website unless you understand the risk.

Network and API tools

Some tools need a network request by nature, including DNS lookups, SSL checks, HTTP header checks, redirect checks, live exchange-rate style lookups, API calls, and MCP/agent utilities. When you call the Utilito API, the input you send is processed by Cloudflare Pages Functions and may appear in infrastructure logs used for security, debugging, abuse prevention, and reliability.

Information that may be collected automatically

Utilito does not collect product analytics, and API/MCP responses emit no metrics response header. Cloudflare may still process standard technical information in platform security and abuse-prevention systems, such as IP address, requested URL, timestamp, and status code; Utilito does not use that infrastructure data as a product-analytics feed.

Utilito has no product-analytics endpoint or aggregate outcome dataset. Browser-local tool interactions are not sent as analytics events, and API/MCP responses do not emit a metrics header. This does not change Cloudflare's necessary security and abuse-prevention processing described above.

Advertising and cookies

Utilito does not load third-party advertising scripts and does not set advertising cookies.

The site may still use essential browser storage for features such as the selected color theme. Cloudflare and Stripe may process necessary technical or payment data as described elsewhere on this page.

Sensitive data

Do not send passwords, private keys, seed phrases, production secrets, regulated health or financial records, or sensitive personal information through the API or contact email. Browser tools are intended for convenience, not secure secret management.

Payments and credential delivery

Stripe processes Builder Pilot checkout, subscription, invoice, payment, and receipt information under Stripe’s own privacy terms. Utilito receives billing status and limited customer details needed to review, provision, support, and cancel the pilot, but does not receive full card details.

Bearer credentials are delivered through a recipient-restricted, expiring secure share. Credential material is not stored in Stripe metadata, analytics, support email, or product logs. After receipt is confirmed, the delivery link and local plaintext copy are deleted; Cloudflare retains only digest-based authorization records and opaque policy identifiers.

Contact

Questions about privacy can be sent to [email protected].