ToolRoof
Privacy
Know what stays on your device and what leaves it when you choose an online service.
Calculators and local tools
Ordinary calculations, text, JSON and unit conversions run in your browser. Favorites, recent tools, language and theme stay in local storage; you can clear them. A result you explicitly share in a URL reaches the hosting service and may enter request logs. Do not put sensitive values in links.
Free file conversions
Upload within 15 minutes and start within 35 minutes of creating your request. Download the result within 1 hour of readiness. Originals are deleted after conversion; failed, cancelled and expired files are also removed. Deletion usually starts within 5 minutes and may take longer if cleanup needs to retry. Your request shows when deletion is confirmed. Uploads are used only for the conversion you request. Processing takes place in Nuremberg, Germany, with Hetzner; Cloudflare provides the website and private storage through its global network. Access uses a 24-hour browser session, without an account. Keep your private recovery link if you need access after clearing that session.
Retention and deletion
We keep basic request records for 7 days and quota records for 30 days. Deleted records can remain in encrypted backups for up to 14 additional days. Backups do not include uploaded files or reopen expired downloads. Free file conversion requires no payment or card.
Measurement and hosting
Optional aggregate analytics requires your choice and respects Global Privacy Control. It counts pages, tools, language, coarse country and success/failure, not inputs, file content, raw searches or personal identity. Aggregates expire after 90 days. Hosting and essential security/quota records still protect and deliver the service when analytics is refused. No advertising tracking or session replay.
Temporary URL shortener
We store the destination to route visitors for 24 or 48 hours, with extensions up to 7 days in total. Do not include sensitive data in it. An essential cookie lets the creating browser manage links; clearing it removes that access. Deletion or expiry removes the destination. Quota records remain up to 8 days, request limits up to 2 days, and reports/actions up to 30 days. After 30 days, inactive links lose creator/request hashes; a reserved identifier remains to prevent reuse. Deleted data may remain in encrypted backups for 14 extra days; restoration never reactivates links. A daily network hash helps prevent abuse, not identify people. The destination preview is not a safety guarantee: we do not read or scan its content for malware.
Updated October 6, 2026