Privacy Policy
YourFileKit added optional accounts, so this page changed with them. The short version: your files still never leave your browser, period, and an account only ever stores what you type into it.
Last updated: August 31, 2026
The short version
Your files never leave your browser
This hasn't changed and isn't going to: every tool reads, processes, and writes files using your browser's own File, Canvas, and encoding APIs. Nothing is uploaded, ever, account or not.
An account is optional, and does one thing
Creating one lets you save your company details once (name, GSTIN, logo, bank details) so invoice and receipt tools fill them in for you. Every tool still works with zero account, exactly as before.
Nothing we could see about your files, even if asked
Since your files are never transmitted anywhere, there's nothing on our end to view, store, hand over, or lose in a breach, account or not.
A few things saved on your own device
Some tools save your in-progress work locally in your browser, purely so a refresh doesn't lose it. That data stays on your device. See "What's saved locally" below.
How tool processing actually works
A typical online file tool works by uploading your document to a server, running a program on it there, and sending the result back. That upload is the whole privacy problem: once your file leaves your device, you're trusting someone else's server, their retention policy, and everyone with access to it.
YourFileKit skips that step entirely. Modern browsers can already decode a file, redraw it, re-encode it, and save it back to your disk, the same APIs a web page uses to display a PDF or an image. Every tool here is built on top of those APIs, running inside the tab you already have open. This is true whether or not you're signed in.
If you create an account
An account exists for one reason: so invoice and receipt tools can fill in your business details automatically instead of you retyping them every time. Creating one stores:
- Your email address and password (password is hashed by our auth provider, Supabase; we never see or store it in plain text).
- Whatever you fill into "My Business": company name, GSTIN, address, phone, logo, signature, and bank details. Every field is optional except company name.
- A sign-in history: timestamp, IP address, an approximate city/country looked up from that IP, and browser/device, recorded each time you log in.
Why the sign-in history:it's the same "recent activity" view GitHub or Google show you about your own account: it exists so you (and, for security tracing, a site administrator) can spot a login that doesn't look like you. You can see your own history any time on your Sign-in activity page. It is never sold, shared with a third party, or used for anything besides account security.
None of this touches your files. Tool processing stays exactly as described above, an account only ever stores what you explicitly typed into a form.
What's saved locally, and why
A handful of tools save your in-progress work using your browser's own local storage (specifically localStorage for the invoice and receipt generators, and IndexedDBfor the PDF editor), so that closing the tab or refreshing the page by accident doesn't erase what you typed or edited.
- That data is written only to your own device. It's never sent to us or anyone else, at any point.
- It stays there until you clear it yourself, either with the tool's own "Start over" button or by clearing site data in your browser's settings.
- We have no access to it. It doesn't pass through a server we operate, so there's nothing for us to read, back up, or lose.
What we still don't do
Anonymous usage analytics
As of August 31, 2026, YourFileKit uses Google Analytics to see which pages and tools actually get used, so we know what to build or fix next. This section used to say "no analytics"; that was true when it was written and stopped being true once this was added, so we're updating the page instead of leaving the old claim up.
What it collects, on every visit:
- The page you visited, your approximate location (city-level, derived from IP address, the precise IP isn't retained by us), and your browser/device type, standard for any analytics tool.
- A small number of interaction events: which tool page you opened, that a result was downloaded (just its file type, e.g. "pdf", never the filename or the file itself), that you copied a result, and that you favorited or unfavorited a tool.
What it never collects: anything you type into a tool, any file you upload or process, or any document a tool generates. That data still never leaves your browser, exactly as described above; analytics only ever sees which page you're on and which button you clicked, not what's in it.
Google Analytics sets a cookie to tell anonymous visits apart from one another. That's one of two cookies this site can set, the other being the optional sign-in cookie described above, set only if you create an account.
Deleting your account and its data
Email hello@yourfilekit.com from the address on the account and we'll delete your account, your saved company profile, and your sign-in history. Since none of it was ever tied to your files or tool usage, that's a complete deletion, not a partial one.
Children's privacy
YourFileKit doesn't knowingly collect personal information from children. Account creation asks for an email address like any sign-up form and isn't directed at children.
Changes to this policy
If what YourFileKit collects or stores ever changes, this page will change with it and the date at the top will be updated. Given the whole premise here is "nothing leaves your browser unless you explicitly typed it into a form," that's not a change we'd make quietly.