Privacy Policy

StegoToolkit is a browser-based tool platform. Every steganography, encryption, and developer tool on this site runs entirely in your browser using JavaScript. No files, images, audio, or documents you process are ever uploaded to our servers — because we don't have any processing servers. Your data stays on your device.

• Contact form submissions

  If you use the Contact page, we collect your name, email address, and message. This information is sent directly to our team email and is used solely to respond to your enquiry. We do not store it in any database.

• Anonymous usage analytics

  We use Vercel Analytics to collect anonymous, aggregated usage data such as page views and tool interactions (e.g. button clicks or feature usage). This data does not include personal information, file contents, or identifiable user data. We do not use cookies for tracking or attempt to identify individual users. All events are aggregated and cannot be used to identify individual users. This helps us improve performance, fix bugs, and understand which tools are most useful.

• No account data

  StegoToolkit has no user accounts. We collect no usernames, passwords, or profile information.

All processing happens entirely in your browser. Files are never uploaded or transmitted to any server at any time — they are loaded into browser memory only, processed locally, and discarded when you close or refresh the page. We do not use uploaded files for AI training or external analysis. The platform is designed for privacy-sensitive use cases such as cybersecurity research and CTF environments.

We use a single localStorage entry to remember your light/dark theme preference. No cookies are set by StegoToolkit itself. If you use a browser extension or third-party service that injects cookies, that is outside our control.

StegoToolkit is hosted on Vercel. We use Vercel Analytics for anonymous, aggregated usage statistics — no personal data is shared with Vercel beyond what is described above. We do not integrate any advertising networks or data brokers. We do not sell, rent, or share your personal data with any third party. You can review Vercel's privacy practices at vercel.com/legal/privacy-policy.

Contact form submissions are retained in our email inbox for as long as necessary to resolve your enquiry, after which they may be deleted. We do not maintain any separate database of contact submissions.

If you have submitted a contact form and would like your data deleted, or if you have any questions about this policy, you can reach us via the Contact page. We will respond within 48 hours.

If we make material changes to this privacy policy, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.