Privacy Policy
How UtilStax handles your data, your files, and your privacy. The short version: your files are yours, and we keep it that way.
Last updated: June 4, 2026
Browser-first
Files processed on your device
Auto-deleted
Server files gone in 1 hour
No training
We never use your files for AI
Our core commitment
UtilStax is built on a simple principle: your files are yours.
The majority of our tools process files entirely in your browser using client-side technology. Your files never touch our servers unless the operation specifically requires it.
We will never train AI models on your files, sell your data, or share your personal information with advertisers.
1.Information we collect
Information you provide
- Account information: Email address and name when you create an account. Passwords are stored only as salted scrypt hashes; if you sign in with Google we never receive a password.
- Payment information: Processed by Stripe. We never see or store your card number.
- Support communications: If you email us, we retain the conversation to provide support.
Information collected automatically
- Usage analytics: PostHog tracks which tools are popular and where users drop off. No third-party trackers on tool pages.
- Error tracking: Sentry captures application errors (browser type, OS, action). Never file contents.
- Server logs: IP addresses, timestamps, API endpoints. Retained 30 days.
Information we do NOT collect
2.How your files are handled
Merge PDF, Compress Image, Crop, Rotate/Flip and more process entirely in your browser. Files exist only in memory and are discarded when you close the tab.
Files over 100MB use temporary cloud storage (Cloudflare R2) via short-lived signed URLs. Processing happens in disposable containers. Auto-deleted within 1 hour.
We will never:
- Use your files to train machine learning models
- Share your files with any third party
- Access your files for any purpose other than the operation you requested
- Retain files beyond the 1-hour auto-deletion window
3.How we use your information
- To provide the service: Process files, manage accounts, handle billing.
- To enforce usage limits: Track tasks per day as counters, not file contents.
- To improve the product: Analytics on tool usage, completion rates, and errors.
- To communicate: Transactional emails only. No marketing without consent.
- To prevent abuse: Rate limiting, fraud detection, blocking malicious uploads.
4.Third-party services
We use a small number of trusted services:
We do not sell data to any of these providers or to any other third party.
5.Data retention
| Data type | Retention |
|---|---|
| Files (server-side) | Auto-deleted within 1 hour |
| Files (client-side) | Never stored. Browser memory only. |
| Account data | While active. Deleted within 30 days of request. |
| Usage records | 90 days (individual), aggregated indefinitely |
| Server logs | 30 days |
| Payment records | 7 years (tax/financial regulations) |
6.Your rights
Email utilstax@gmail.com to exercise any right. We respond within 7 business days.
- Authentication cookies: A single first-party, httpOnly session cookie for login sessions. Essential.
- Analytics cookies: Set by PostHog. Can be blocked without affecting tools.
No advertising cookies, retargeting pixels, or social media trackers.
8.Security
- All connections encrypted via TLS (HTTPS)
- Signed URLs: short-lived (15 min), scoped to a single file
- Server-side processing in disposable containers, no persistent disk
- Row-level security on all database queries
- First-party authentication with salted scrypt password hashing and revocable, hashed session tokens
- Stripe handles all card data - we never touch PANs
9.Children
UtilStax is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10.Changes to this policy
Material changes will be communicated via email (if you have an account) or a prominent notice on the website. The date at the top reflects the most recent revision.
11.Contact
utilstax@gmail.com
For privacy questions, data requests, or concerns