Cookie Policy

Cookies are small text files a website can store in your browser. Similar technologies — localStorage and sessionStorage — store data in your browser without sending it back on every request. This policy covers both.

StegoToolkit's tools run entirely in your browser: the files, images, audio, and documents you process are never uploaded. The only data collection on this site is aggregate analytics. When you first visit, a banner asks what you allow. Until you make a choice, no analytics or advertising technology is loaded — this is the same for every visitor, regardless of location. Google Analytics, Ahrefs and Google AdSense are added to the page only after you accept the relevant category, and Google Consent Mode v2 is configured so that even then only the categories you allowed are active. You can change your choice at any time from the "Cookie settings" link in the footer.

Two localStorage entries are always present because the site cannot work correctly without them: your theme (light/dark) preference, and your cookie choice itself. Neither is a cookie, neither is sent to any server, and neither can be used to identify you.

Google Analytics 4 is configured with IP anonymization and Google Consent Mode v2. Its default consent state is 'denied' for all four signals (analytics_storage, ad_storage, ad_user_data, ad_personalization). The Google Analytics script is not added to the page until you accept analytics cookies — before that, nothing is loaded or sent, for every visitor regardless of location. When you accept, GA4 sets first-party cookies (such as _ga) to distinguish sessions and Ahrefs Web Analytics is also loaded; both tell us which tools are popular and where errors happen so we can prioritise fixes. We never send the contents of any file you process to any analytics provider.

If advertising is enabled and you accept, Google AdSense may set cookies to serve ads, cap how often you see them, and — where your choices allow — personalize them. You can further manage ad personalization at Google's Ads Settings (adssettings.google.com) and aboutads.info. No file or payload data from any tool is ever shared with advertisers.

The site is hosted on Vercel, which provides a first-party, cookieless analytics measurement that does not use cookies or collect personally identifiable information. Because it sets no cookies and cannot identify you, it runs without a separate consent prompt. See vercel.com/legal/privacy-policy.

Use the "Cookie settings" link in the site footer to re-open the banner and change your choice at any time. Switching from Accept to Decline reloads the page and clears the analytics cookies we can reach. You can also delete cookies and site data directly in your browser settings, and install Google's Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.