Privacy policy
2026-10-16
Updated October 16, 2026. This policy explains how ToolMelo games and online tools handle information. Features work in different ways; please also read the notes on each page.
1. Local files and input
The PDF, image, QR code, Markdown, JSON and text tools process the files you choose and the text you enter in your browser. These tools currently do not upload your input to the ToolMelo server on their own, and do not send it to cloud AI services. OCR and HEIC conversion may need to download programs, language data or decoders from this site; the processing itself runs locally.
Content you are editing and files passed between tools are kept in the memory of the current page; refreshing, closing or leaving the workspace may clear them. Files downloaded to your device are in your care, and this site cannot delete them.
2. What goes online
The Web Image Extractor sends the address you submit to our server. The server looks up the target domain with Cloudflare DNS, then fetches the target page or images and returns the result to your browser; it does not forward your login cookies or authorization headers. The application code of this feature does not write the submitted addresses or images to a database.
The decision tools (the AI Subscription Checkup, Should I Quit My Job, Should I Do It and the others) send the choices and text you enter through our server to TypeSafe’s Jev model API (api.typesafe.ai) to be judged; once the result is returned, they are not written to a database or a log. Prices and income are turned into ratios in your browser; the amounts themselves are never sent. To prevent abuse, a Cloudflare Turnstile human check runs before each judgment; Cloudflare handles that check, may read browser information and may use its own cookies. One IP address can run 3 judgments a minute. TypeSafe’s handling of the data it receives is governed by its own policy.
If you turn on “Load linked images” in the Markdown formatter, or open an exported HTML file that contains linked images, your browser contacts the websites the images come from, and those websites may receive your IP address and standard request information. After you open an external link from this site, that website’s own policies apply to your information.
3. Storage in your browser
We use localStorage for recently opened tools, sidebar and category states, appearance, saved games and local scores, and your analytics choice. These local records are not uploaded as analytics content. You can clear recent tools on the home page, change your choice through “Analytics settings” in the footer, or remove local records with your browser’s clear-site-data option. Preferences may not persist if storage is blocked.
When you first open a Chinese page that also exists in English or Japanese, this site reads your browser’s language preference (Accept-Language) and sends visitors who prefer another language to the matching English or Japanese page; this information is used only for that redirect and is not stored. If you use the language switcher at the top of the page, this site sets a cookie named tm_lang for 1 year that records only the language you chose, after which you are no longer redirected automatically; clearing this site’s data deletes it.
4. Hosting, security and access logs
The site is hosted on Cloudflare (Workers and CDN). Cloudflare may process IP addresses, requested URLs, browser information, access times and security logs, and may use anti-abuse cookies. To prevent abuse, the endpoints of the Web Image Extractor and the decision tools limit how often requests can be made from each IP address. How long this data is kept depends on the service provider and its settings; “files are processed locally” does not mean that visiting the site leaves no network records.
Cloudflare Web Analytics measures visits and loading performance without analytics cookies. Google Analytics 4 (GA4) can be turned off. There is no automatic analytics pop-up. On a first visit, our own endpoint uses the country supplied by Cloudflare to choose the default; it returns only an on/off default, not an IP address or country. In the EEA, UK and Switzerland, or when the country is unknown, GA4 loads only after you choose “Allow analytics” in the footer settings. Elsewhere it is on by default. Global Privacy Control or Do Not Track signals prevent automatic activation; a previously saved explicit choice takes priority. When enabled, it uses _ga and _ga_ cookies to distinguish browsers and sessions (configured here for at most one year). GA4 receives page paths, referring sites, browser and device information, and game start, completion and restart events with the game, category, language and result; Google also processes request network information. We do not send files, filenames, article text, passwords, QR contents, form input or board records to GA4. Page addresses sent to GA4 omit query strings and fragments. Automatic enhanced measurement of forms, site searches and outbound links is disabled, as are Google signals and advertising personalization. Declining does not affect games or tools. You can withdraw through “Analytics settings” in the footer at any time; this stops subsequent GA4 collection and clears this site’s GA cookies, but does not automatically delete data already sent. Google’s processing is also governed by its privacy policy.
5. Contact and corrections
To report a privacy issue or ask how information is handled, email the operator, Bangfa, at bookmelo@gmail.com. Please first describe the page and what happened, and use redacted samples; do not send passwords, complete identity documents or private files that are not needed.