Privacy Policy
Last Updated: September 2026
At SecuTools.io, we operate with a strict zero-knowledge, client-side first architecture. We believe cybersecurity tools must respect the privacy and security of the practitioners and students who use them.
1. Client-Side Processing & Data Minimization
Unlike many online converters and security utilities, SecuTools.io executes cryptographic calculations, string transformations, and file inspections directly inside your browser using Web APIs, Web Crypto, and JavaScript.
- Cryptographic Hashes & Keys: Passwords, JWTs, hashes, and RSA keys processed in these tools never leave your device and are never sent to our servers.
- PCAP & File Uploads: Files provided to tools like the PCAP decoder or Certificate Parser are read locally in memory via the browser File API; no file payload is uploaded to remote storage.
- No User Accounts: We do not require registration, login, or personal profile creation.
2. External Public APIs & Third-Party Queries
Certain intelligence lookups inherently require querying external public databases (such as CVE feeds, ASN records, DNS lookups, or VirusTotal hashes). These queries occur only upon your explicit request.
| Service / Integration | Purpose | Data Sent |
|---|---|---|
| CIRCL / NVD | Vulnerability (CVE) lookups | CVE Identifier string |
| VirusTotal / AbuseIPDB | Threat intelligence verification | Target IP/domain/hash query |
| RDAP / WHOIS Providers | Domain registration lookup | Target domain name |
| Vercel (Hosting & Performance) | Global CDN delivery & aggregated performance telemetry | Anonymized HTTP request headers & page load latency |
3. Legal Bases for Processing (GDPR & International Privacy)
Under the EU General Data Protection Regulation (GDPR Art. 6) and California Consumer Privacy Act (CCPA/CPRA), we process minimal data based on:
- Legitimate Interests: Operating a secure, performant, and resilient website infrastructure and protecting against denial-of-service abuse.
- Consent: For aggregated performance telemetry (where accepted via our Cookie/Consent banner).
4. Your Privacy Rights
Depending on your jurisdiction, you have the right to request access, rectification, deletion, restriction, and portability of personal data.
Because SecuTools.io does not maintain user databases, accounts, or persistent personal logs, we generally store no identifiable data linking to your identity.
5. Contact Information
Operator: SecuTools.io / Karthikeyan T
Email: tkarthikeyan@gmail.com