Privacy Policy

The Short Version

Almost everything on Alfreto runs entirely in your browser. When you compress a PDF, resize an image, convert audio, or use any of our file tools, the processing happens locally on your device using JavaScript and browser-native APIs. Your files are never transmitted to any server — ours or anyone else's.

The only data we may receive is standard web traffic data (page visits, browser type) that any website receives by default — and even this is handled with minimal logging.

Information We Collect

We collect only the minimum information necessary to operate the website. Here is what may be collected and why:

• Page view data — Standard web analytics (pages visited, approximate session duration) to understand how the site is used. No personal identifiers are attached.
• Browser and device type — Collected automatically by web servers as part of standard HTTP requests. Used only for compatibility monitoring.
• Contact form submissions — If you choose to contact us, we receive the message and any contact details you voluntarily provide. Used only to respond to your inquiry.
• Cookies — Essential cookies for site functionality. See the Cookies section below for full details.

We do NOT collect: your name, email, IP address (beyond standard server logs), location data, browsing history across other sites, or any files you process using our tools.

How Your Files Are Processed

This is the most important section. The majority of tools on Alfreto process files using browser-native JavaScript APIs — the Canvas API, PDF-lib, Web Audio API, and WebAssembly modules. This means:

• Your files are loaded into your browser's memory only — never sent to our servers
• Processing happens on your device's own CPU, not on any remote server
• No file content is transmitted over the internet for the vast majority of tools
• When you close the browser tab, all file data is immediately cleared from memory
• Fully local tools work even without an internet connection once the page has loaded

Tools that use external APIs: A small number of tools — specifically the Anthropic API transcription tool and the YouTube Verbatim extractor — send a minimal amount of data to a third-party API to function. In these cases, only the data required by that specific tool is transmitted (e.g. an audio file to Anthropic's API, or a YouTube video ID to the caption API). Each of these tool pages displays a clear privacy notice before you use them.

Cookies

We use cookies only where necessary for the website to function correctly. We do not use cookies to track you across websites, build advertising profiles, or identify you as an individual.

• Essential cookies — Required for basic site functionality such as remembering UI preferences within a session. Cannot be disabled without breaking site behavior.
• Google AdSense cookies — Google, as a third-party advertising provider, may place cookies on your browser to serve relevant ads based on your browsing history. This is governed by Google's own privacy policy, not ours.

We do NOT use: advertising or retargeting cookies of our own, analytics cookies that personally identify you, or cross-site tracking cookies. You can disable cookies in your browser settings at any time without affecting the core functionality of the file processing tools.

To opt out of Google's personalized ads, visit Google Ads Settings or the Digital Advertising Alliance opt-out.

Advertising — Google AdSense

Alfreto is free to use. To sustain the platform and keep all tools free forever, we display advertisements via Google AdSense. This is the only revenue source — we do not sell user data, run affiliate programs for tool recommendations, or accept payment to promote any product.

Google AdSense is operated by Google LLC and uses cookies to serve ads based on a user's prior visits to websites. This behavior is governed by Google's Privacy Policy.

You can opt out of personalized ads by visiting Google Ads Settings. Non-personalized ads will still appear but will not be based on your browsing history.

Third-Party Services

The following third-party services are integrated into Alfreto. Each operates under its own privacy policy, which we encourage you to review:

• Google AdSense — Advertising network. May set cookies for personalized ads. Google Privacy Policy →
• Anthropic API — Used by the "Audio to Text with Anthropic API" tool. Audio is sent to Anthropic's servers for transcription only when you explicitly choose this tool. Anthropic Privacy Policy →
• Supadata API — Used by the YouTube Verbatim tool to retrieve caption data. Only the YouTube video ID is transmitted. Supadata →
• Cloudflare CDN — Serves JavaScript libraries (PDF-lib, Whisper WASM, etc.). May log standard CDN access data. Cloudflare Privacy Policy →
• Sociabuzz — Optional donation processing. Only engaged if you choose to support the project. Sociabuzz →

Children's Privacy

Alfreto is a general-purpose productivity tool website and is not directed at children under 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has submitted personal information, please contact us and we will delete it promptly.

Because our tools do not require account creation or any personal data submission, there is no meaningful way for personal data to be submitted through normal use of the site.

Data Retention & Security

Because we collect minimal data, there is minimal data to retain or secure:

• File data — Never stored. Processed in browser memory and cleared when the tab is closed.
• Contact form messages — Retained only as long as necessary to respond to your inquiry, then deleted.
• Standard web logs — Retained for a limited period (typically 30 days) for security and debugging, then deleted.
• Cookies — Session cookies expire when you close your browser. Persistent cookies follow standard browser expiry rules.

We implement reasonable technical security measures appropriate to the minimal data we handle. However, as with any website, we cannot guarantee absolute security of data transmitted over the internet.

Your Rights

Depending on your location, you may have rights regarding your personal data under GDPR, CCPA, or similar regulations. Because we collect almost no personal data, most rights are automatically satisfied — but we respect them fully:

To exercise any of these rights, contact us via the Contact page. We will respond within a reasonable timeframe.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, the "Last updated" date below will be revised. We encourage you to review this page periodically.

Continued use of the website after any changes constitutes your acceptance of the updated policy. If changes are significant, we will make a reasonable effort to highlight them prominently.

Last updated: March 2026