Privacy Policy
Last updated: July 2026
1. Overview
Billu Tools ("we", "our", "us") operates the website billu.tools. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using our website and tools, you agree to the practices described here.
2. File processing — your files never leave your device
All file processing tools on Billu Tools (image compression, image resizing, PDF merging, PDF compression, and all future tools) operate entirely within your web browser using client-side JavaScript and WebAssembly. Your files are never uploaded to our servers, never transmitted over the internet, and never stored or processed by any third party as part of tool functionality. You can verify this by opening your browser's Network tab while using any tool — you will see zero file upload requests.
3. Account data
If you choose to create an account, we collect and store your email address, display name, and (for Google OAuth users) your Google profile ID. Passwords for email/password accounts are stored as bcrypt hashes — we never store plaintext passwords. Account data is stored in a Neon PostgreSQL database hosted in the EU/US region. You may delete your account at any time by contacting hello@billu.tools.
4. Usage analytics
When you use a tool, we log a record containing: which tool was used, an approximate file size (bytes — not the file content), a timestamp, and either your user ID (if signed in) or an anonymous UUID stored in your browser's localStorage. This data is used to count conversions, award Orbs, and improve tool quality. It is never sold.
5. Cookies and local storage
We use browser localStorage to store: (a) your anonymous user ID (a random UUID), and (b) your gamification state (Orb count, streak, last active date). We do not use advertising cookies ourselves. Third-party advertising (Google AdSense) may set cookies per Google's own Privacy Policy. You can opt out of personalised ads via Google's Ad Settings.
6. Third-party services
We use the following third-party services: Google AdSense (advertising), Google OAuth (optional sign-in), Neon PostgreSQL (database), Cloudflare Pages (hosting and CDN). Each service operates under its own privacy policy. Cloudflare may log IP addresses and request metadata per their standard DDoS protection practices.
7. Children's privacy
Billu Tools is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, contact us immediately at hello@billu.tools.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, email hello@billu.tools. We will respond within 30 days.
9. Changes to this policy
We may update this policy occasionally. When we do, we will update the "Last updated" date above. Continued use of the site after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this policy? Email hello@billu.tools.