Security First

    Built with security at the core.

    Last updated: February 2026

    Client-Side Processing - No Server-Side Data Handling

    All tools on Tooltri run entirely within your browser using client-side JavaScript. Your input data - whether it is financial figures entered into a calculator, a password being generated, a JWT token being decoded, a Base64 string being converted or a date being processed - is never transmitted to our servers, never stored in a database and never logged in any form. This is not a policy promise - it is an architectural fact. We have no server-side data processing infrastructure for tool inputs because the tools do not communicate with any backend.

    No Input Data Storage or Logging

    Tooltri maintains no database of user inputs, no server-side logs of tool usage data and no file storage system for uploaded content. When you close a browser tab containing any of our tools, all input and output data is permanently gone - we have no copy of it and no means of recovering it. This zero-retention architecture means a server-side security breach at Tooltri cannot expose your tool input data because that data was never on our servers to begin with.

    HTTPS & Encrypted Connections

    All pages and resources on Tooltri are served exclusively over HTTPS with modern TLS encryption. This ensures that your connection to our platform is encrypted and protected against man-in-the-middle interception. Any data transmitted between your browser and our servers - which is limited to loading the tool interfaces themselves, not your input data - is encrypted in transit. We do not serve any content over unencrypted HTTP.

    Password Generator Security

    The Password Generator on Tooltri uses JavaScript's Math.random() function to generate passwords locally in your browser. Generated passwords are never transmitted over the network, never logged and never visible to Tooltri or any third party. The generated password exists only in your browser until you copy it. We recommend immediately storing generated passwords in a reputable password manager (Bitwarden, 1Password or KeePassXC) rather than writing them down or storing them in plain text.

    Financial Data Security

    All financial figures you enter into our calculators - including investment amounts, loan values, interest rates, income figures, profit margins and advertising budgets - are processed exclusively within your browser and are never transmitted anywhere. Our financial calculators (SIP, SWP, EMI, ROI, CPM, Profit Margin) perform all calculations using local JavaScript execution. There is no API call, no server-side computation and no data transmission involved in any calculation result you see.

    Developer Tool Security

    Sensitive data processed through our developer tools - including JWT tokens (which may contain authentication claims and signing secrets), Base64-encoded images or files, URL-encoded strings, JSON payloads (which may contain API keys or credentials) and Unix timestamps - is handled exclusively within your browser session. None of this data is transmitted to Tooltri's servers or any third-party service. We strongly recommend not processing production secrets or live credentials in any online tool as a general security practice.

    Third-Party Security Considerations

    While Tooltri's own infrastructure does not handle your tool input data, our platform does load third-party scripts from Google Analytics and Google AdSense. These scripts operate under Google's security and privacy policies. To minimize third-party script exposure, you can use a browser with a content blocker or disable JavaScript from specific origins through your browser's security settings. All core tool functionality will continue to work with ad blockers enabled.

    Responsible Disclosure

    If you discover a security vulnerability in Tooltri - including issues with our client-side tool implementations, content security policy, HTTPS configuration or third-party integrations - we encourage responsible disclosure by contacting us directly through our contact page. We take all security reports seriously and will acknowledge and address legitimate vulnerabilities promptly. We appreciate the security community's role in keeping online tools safe for all users.