Privacy Policy

1. Who We Are

PocketLab Tools ("we", "us", "our") operates the website pocketlabtools.com and its subdomains. We are based in Berlin, Germany and are subject to the EU General Data Protection Regulation (GDPR).

2. Data We Collect

Data we do NOT collect

By default, PocketLab Tools does not collect any personal data. Specifically:

• No user accounts or registration
• No names, email addresses, or contact information
• No IP address logging
• No browser fingerprinting
• No usage tracking or analytics (unless you explicitly opt in)
• No third-party trackers, advertising scripts, or social media widgets

Data processed locally

All content you create or edit in our tools (diagrams, text, code, etc.) is processed entirely within your web browser. This data never leaves your device and is never transmitted to our servers or any third party.

Data stored in your browser

We use your browser's localStorage to remember your preferences and tool state:

• Theme preference (light/dark mode)
• Cookie consent choice (your accept/reject decision)
• Tool-specific data (e.g. saved projects, editor content, recent settings). This varies by tool and is used to restore your work between sessions.
• API keys (if you use AI-powered features). Some tools offer optional AI features that require your own API key (BYOK). If you choose to provide one, it is encrypted (AES-GCM) and stored locally on your device. Keys are never transmitted to our servers.

All of this data is stored only on your device and is never transmitted to PocketLab Tools. You can clear it at any time through your browser settings or through the tool's own settings.

3. Cookies

PocketLab Tools uses minimal cookies, categorized as follows:

Name	Purpose	Type	Duration
plt-cookie-consent	Stores your cookie consent preference	Necessary	180 days
plt-theme	Stores your light/dark theme choice	Necessary	Persistent

Analytics cookies (opt-in only)

If you explicitly consent to analytics in our cookie banner, we may use a privacy-friendly analytics service (such as Plausible or Fathom) to understand general usage patterns. These services:

• Do not use cookies for cross-site tracking
• Do not collect personal data
• Do not share data with third parties
• Are fully GDPR compliant

Analytics are never loaded unless you click "Accept Selected" with the Analytics checkbox enabled. You can withdraw consent at any time via the "Cookie Preferences" link in our footer.

4. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of access — You can request details about any personal data we hold. Since we don't collect personal data, there is nothing to provide.
• Right to erasure — You can request deletion of personal data. You can clear all locally stored data by clearing your browser's localStorage for our domain.
• Right to withdraw consent — You can withdraw cookie consent at any time using the "Cookie Preferences" link in the footer of any page.
• Right to object — You can object to data processing at any time.
• Right to lodge a complaint — You have the right to lodge a complaint with a supervisory authority. The relevant authority for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

5. Third-Party Services

PocketLab Tools does not use any third-party analytics, advertising, or tracking services. However, some of our tools load external resources to provide their functionality. None of these services are used for tracking or profiling.

Content Delivery Networks (CDNs)

Many tools load open-source JavaScript libraries from CDNs to provide functionality such as diagram rendering, file export, syntax highlighting, and charting. The CDN providers we use are:

• jsDelivr (jsdelivr.net) — Libraries such as Mermaid.js, JSZip, markdown-it, ECharts, highlight.js, docx, pptxgenjs, and others
• Cloudflare CDN (cdnjs.cloudflare.com) — Libraries such as PDF.js and jsPDF

These libraries do not include tracking capabilities. However, the CDN provider may log standard HTTP request data (such as IP address and user agent) subject to their own privacy policies.

Google Fonts

Some tools load the Inter and JetBrains Mono font families from Google Fonts (fonts.googleapis.com). When these fonts are loaded, Google may receive your IP address and browser information. Google's privacy policy applies to this data. See Google's Privacy Policy and Google Fonts Privacy FAQ.

AI-Powered Features (BYOK)

Several tools offer optional AI-powered features that use a "Bring Your Own Key" (BYOK) model. These features are entirely opt-in and only activate when you provide your own API key. When you use these features:

• Your content (e.g. text, prompts, document excerpts) is sent directly from your browser to the AI provider's API. It does not pass through PocketLab Tools servers.
• The AI providers we integrate with are Anthropic (api.anthropic.com) and OpenAI (api.openai.com).
• Your API key is stored encrypted (AES-GCM) in your browser's localStorage and is sent directly to the respective API. We never see or store your key.
• The AI provider's privacy policy and terms of service apply to any data you send through their API.

If you do not provide an API key, no data is sent to any AI provider.

Hosting

PocketLab Tools is hosted on Cloudflare Pages. Cloudflare may process standard HTTP metadata (IP address, request headers) for the purpose of delivering content and providing security (DDoS protection, SSL). See Cloudflare's Privacy Policy.

6. Data Transfers

PocketLab Tools itself does not collect or transfer personal data. However, when using our tools, your browser may connect to third-party services that operate outside the European Economic Area (EEA):

• CDN providers (jsDelivr, Cloudflare) may serve content from global edge servers, including locations outside the EEA.
• Google Fonts is operated by Google LLC (USA). Connections are made directly from your browser.
• AI APIs (Anthropic, OpenAI) are US-based services. If you opt in to AI features by providing your API key, content you submit is processed by these providers under their respective data processing agreements.

These connections are made directly between your browser and the third-party service. No personal data passes through PocketLab Tools servers. Each provider maintains their own safeguards for international data transfers (e.g. Standard Contractual Clauses, EU-US Data Privacy Framework).

7. Children's Privacy

Our tools are general-purpose developer utilities and are not directed at children under 16. We do not knowingly collect any data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page. Since we don't collect email addresses, we cannot notify you directly of changes — we recommend checking this page periodically.

9. Contact

If you have any questions about this Privacy Policy or your data, you can reach us at:

PocketLab Tools
Berlin, Germany
Email: privacy@pocketlabtools.com