Privacy Policy

StegoToolkit is a browser-based tool platform. Every steganography, encryption, and developer tool on this site runs entirely in your browser using JavaScript. No files, images, audio, or documents you process are ever uploaded to our servers — because we don't have any processing servers. Your data stays on your device.

• Contact form submissions

  If you use the Contact page, we collect your name, email address, and message. This information is sent directly to our team email and is used solely to respond to your enquiry. We do not store it in any database.

• Anonymous usage analytics

  We use Vercel Analytics to understand aggregate site usage, such as page views and tool interactions (e.g. button clicks or feature usage). Vercel Analytics may process standard web request data (such as IP address) as part of generating these aggregated statistics, per Vercel's own privacy notice — see the Third-party services section below. StegoToolkit does not use analytics to identify individual users, and never collects the contents of files you process in any tool. This helps us improve performance, fix bugs, and understand which tools are most useful.

• No account data

  StegoToolkit has no user accounts. We collect no usernames, passwords, or profile information.

• Google Analytics 4 (Consent Mode v2)

  StegoToolkit uses Google Analytics 4 with Google Consent Mode v2 and IP anonymization. Its default consent state is 'denied' for analytics_storage, ad_storage, ad_user_data and ad_personalization. The Google Analytics script is not loaded at all until you accept analytics cookies — before that, nothing is sent to Google and no cookie is set, for every visitor regardless of location. Once you accept, GA4 uses cookies such as _ga to distinguish visitors and sessions for aggregate measurement (page views, which tools are used, completion and error counts). Aggregated data is shared with Google as described in Google's own privacy policy. You can withdraw consent at any time via the cookie banner, the 'Cookie settings' footer link, or the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout. We never use Google Analytics to identify individual users or to collect the contents of files processed in any tool.

• Ahrefs Web Analytics (consent required)

  If you accept analytics cookies, we also load Ahrefs Web Analytics, a privacy-focused aggregate traffic measurement tool (referrers, page popularity). It is not loaded if you decline.

All processing happens entirely in your browser. Files are never uploaded or transmitted to any server at any time — they are loaded into browser memory only, processed locally, and discarded when you close or refresh the page. We do not use uploaded files for AI training or external analysis. The platform is designed for privacy-sensitive use cases such as cybersecurity research and CTF environments.

When you first visit, a cookie banner asks what you allow: "Accept all", "Reject non-essential", or "Manage preferences" (Analytics and Advertising controlled independently). Until you make a choice, no analytics or advertising technology is loaded — Google Analytics, Ahrefs Web Analytics and Google AdSense are added to the page only after you accept the relevant category, and set no cookies before then. This is the same for every visitor regardless of location; geography is not used as a substitute for your consent. Two localStorage entries are always present because the site needs them to function: your light/dark theme preference, and your cookie choice itself; neither is a cookie and neither is sent to any server. Vercel Analytics is cookieless and runs without a separate prompt. You can change your choice any time via the "Cookie settings" link in the footer. Full details, including a table of every cookie, are in our Cookie Policy at /cookies.

StegoToolkit is hosted on Vercel and uses Vercel Analytics (first-party, cookieless) for aggregate usage statistics. If you accept analytics cookies, we additionally use Google Analytics 4 and Ahrefs Web Analytics for the same purpose. If advertising is enabled and you accept, Google AdSense serves ads. As part of operating the site and providing these services, Vercel, Google, and Ahrefs may each process standard web request data such as IP addresses and device/browser identifiers, per their own respective privacy notices — this is data collected by their infrastructure, not additional data StegoToolkit itself gathers. We do not sell, rent, or share your personal data with any third party. Review Vercel's privacy practices at vercel.com/legal/privacy-policy and Google's at policies.google.com/privacy.

StegoToolkit may display ads served by Google AdSense. Google and its advertising partners use cookies and similar technologies to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising by visiting Google's Ads Settings at adssettings.google.com, or opt out of third-party vendor use of cookies by visiting aboutads.info. Learn more about how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites. Ad-related cookies and data collection are handled entirely by Google and its partners — StegoToolkit does not itself track you for advertising purposes, and no file or payload data you process in a tool is ever shared with any advertiser.

Contact form submissions are retained in our email inbox for as long as necessary to resolve your enquiry, after which they may be deleted. We do not maintain any separate database of contact submissions. Aggregate analytics data is retained by the relevant provider under its own retention settings — for Google Analytics 4 this is configured to the shortest practical period (currently 2 months) for user- and event-level data.

If you have submitted a contact form and would like your data deleted, or if you have any questions about this policy, you can reach us via the Contact page. We will respond within 48 hours.

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.