Privacy Policy
Last updated: September 13, 2026 • Effective immediately
At AIToolBox.io, your privacy and code confidentiality are fundamental design principles. This suite is built for AI engineers, researchers, students, and prompt engineers with a strictly client-side first architecture.
1. Client-Side Execution & Data Minimization
- Prompt & Token Tools: Token counters, prompt templates, prompt injection analyzers, JSONL dataset cleaners, and RAG chunkers run 100% locally in your browser memory via WebAssembly and JavaScript.
- No Account Required: No user registration, password creation, or credit card submission is required to use any of our tools.
- No Prompt Harvesting: We never log, store, sell, or train models on prompts, datasets, or inputs pasted into our tools.
2. Third-Party APIs & External Services
Certain diagnostic tools (such as live CVE feed lookup, WHOIS query, or user-initiated external API testing) require communicating with external endpoints. In these cases:
- Requests only occur when you explicitly trigger the action (e.g. clicking “Fetch” or “Test”).
- API keys provided by you in the API Tester tool are held exclusively in browser memory/session and are never stored on our servers.
3. Cookies & Telemetry
We prioritize zero tracking:
- We do not set advertising, behavioral profiling, or cross-site tracking cookies.
- Local storage is solely used for user experience enhancements (such as theme preferences or saved prompt templates locally in your browser).
- Anonymous performance and speed insights are aggregated via Vercel Speed Insights without capturing any personal information or query content.
4. Security & Encryption
All traffic is encrypted in transit using industry-standard TLS 1.3 / HTTPS. We enforce strict Content Security Policies (CSP) and modern web sandboxing standards to safeguard against XSS and external script injection.
5. Contact & Privacy Inquiries
If you have questions, feedback, or verification requests concerning our privacy architecture, reach out directly: