1. Optional ad measurement
If you allow measurement, we load Google Ads to understand whether our ads lead to verified sign-ups and image exports. Google receives conversion events, random deduplication IDs, ad-click identifiers and technical request information such as your IP address and browser details. We do not include your email, account ID, filenames, files, drafts or prompts in conversion events. Enhanced conversions and personalized advertising are disabled.
We remember your choice on this device for 180 days. Consented journey markers stay locally for up to 30 days and Google ad-attribution cookies are configured for 30 days; Google controls retention of data it receives under its privacy policy. No Google advertising tag loads before you opt in. Use Privacy choices in the footer to withdraw permission and clear our local measurement markers and first-party advertising cookies. We respect Global Privacy Control. Declining does not affect access to any tool.
2. Short links & tracked QR codes
No-key API trials use a daily, secret-keyed network identifier to limit free link creation; we do not store its raw IP address in the trial database. Trial links expire after 7 days and their records are removed after 90 days. A private per-link receipt controls QR export and analytics access. The agent CLI saves this receipt locally until you remove it.
Static QR codes are generated on your device. If you choose tracking, we save the destination URL, title, tags, alias and account ownership in Cloudflare D1. Anyone with the short or QR link can open its destination; do not use hosted links to hide secrets or private access tokens.
Visit analytics retain a timestamp, country, broad device category, referring hostname and short-link or QR channel for up to 90 days. We do not store visitor IP addresses, full user-agent strings, full referring URLs or tracking cookies in these analytics. Known bots and owner test actions are excluded where possible. Counts are requests, not unique people or proof of a camera scan. Cloudflare separately processes requests for delivery and security; operational logs may contain request metadata.
Your dashboard is private to your account. Destination-edit history is kept for up to 90 days for abuse investigation. Deleting a link clears its destination and analytics; a minimal alias, ownership and billing record remains so printed codes are never reassigned and credit accounting stays correct. Contact support to report abuse or request help with your data.
3. API keys & agent access
API keys grant only the permissions you select. We store a hash of each key, its name, prefix, permissions, expiry, last-used time and credit budget in Cloudflare D1. The full key is shown once and is never retrievable. Your agent can access the account data allowed by its key until it expires or is revoked. Optional QR logos sent through the API are processed for that response and are not stored. Credit and request records prevent duplicate charges and enforce shared allowances.
4. Accounts & sign-in
Model alerts are optional. We store your selected model creators, API hosts, language and alert preferences in Cloudflare D1. Resend delivers updates to your verified account email. Delivery records and email contents are removed after 30 days. Manage alerts in the model catalog or unsubscribe from any alert email.
Hosted AI results are encrypted in Cloudflare D1 for up to 24 hours so interrupted requests can be recovered without another charge. Uploaded media is not stored. Account credit receipts and hashed guest usage counters enforce allowances; expired result bodies are removed during subsequent requests. Guest everyday-tool counts are stored locally on your device.
Accounts are optional. Better Auth stores your email, display name, verification status and account/session records in Cloudflare D1. Google sign-in also provides a profile image and provider ID; provider tokens are encrypted at rest. A secure, HTTP-only cookie keeps you signed in for up to 30 days. Login codes are delivered by Resend, stored as hashes and expire after five minutes. We never log codes or email contents. Keyed email/network hashes and short-lived counters limit abuse. Expired sessions, codes and counters are removed during subsequent sign-in requests. Use Your account to access billing, update your display name or sign out other devices. Favorites, presets, files and drafts continue to be stored only on your device or in this tab, and are not synced to your account.
Your language preference and dismissed language suggestions are stored on this device. Dismissing a suggestion hides it for 30 days. Suggestions use your browser language, not your location.
5. Design & developer tools
Unit and color conversions run on your device. Values and conversion settings stay in this tab and can be included in a temporary local sign-in checkpoint. Copying places the result on your clipboard.
Color picking, watermarking, JSON formatting and text comparison run on your device. Saved palettes and watermark style settings remain in local storage until removed or site data is cleared. Uploaded logo files are not part of saved styles. Passwords and passphrases use cryptographic randomness in your browser and are never saved, uploaded or included in sign-in checkpoints. Copying places the result on your clipboard.
6. Images & subtitles
Image collages and their headings are composed on your device. Images, arrangements and crop settings stay in this tab and can be included in a temporary local sign-in checkpoint.
Image conversion, compression, resizing, cropping, metadata removal and subtitle editing process files on your device. These files are not uploaded. Your image-editing batch stays in memory as you move between toolkit pages in this tab, until you clear it, close the tab or reload. Google sign-in temporarily checkpoints your workspace in local browser storage, then restores it when you return. The checkpoint is deleted after restoration; abandoned checkpoints expire after 30 minutes and are removed on a later visit. Nothing in that checkpoint is uploaded. Screenshot presets you choose to save keep their names and style settings locally until you delete them or clear site data. This browser saves your theme, starred tools, timezone choices and shortcuts to up to six recent tools. Remove favorites with their stars and clear recent shortcuts from the Saved menu. Timezone parsing happens on your device. The currency tool requests public reference rates from Frankfurter and caches them on your device for six hours; your entered amounts are not sent.
7. Creator studios & AI assistance
Screenshot styling, social image packs, annotations, favicon generation, QR codes, PDF editing, solid-color background removal and video quick edits run on your device. OCR uses Tesseract.js and may download language assets from jsDelivr and Project Naptha; those hosts receive asset requests and your network address, not your images. With automatic OCR language detection enabled, choosing Extract text sends a reduced image to OpenRouter and Google to identify languages; Tesseract extracts the text on your device. Choosing languages manually skips the hosted detection. Audio transcription sends a normalized recording to Cloudflare Workers AI when you choose Transcribe audio. CozyToolkit does not store these uploads or generated text on its servers. Provider processing and retention policies apply. Daily usage counters retain a rotating hashed network identifier, request ID and usage totals for seven days. Review AI output before use.
Adapting posts, using a writing style and translating subtitles use the same writing service and daily limits as the writer. A saved writing example is sent with rewrites only. Clear it under Polish → My writing style or clear site data. Image attachments and their descriptions remain in tab memory and are never included in AI requests. They survive tool navigation, but are cleared on reload or closing the tab. Download your draft to keep its text and images together. Continuing to X opens the text; attach the images in X yourself. Transferring extracted text to the writer adds new posts without overwriting existing drafts and leaves automatic AI checking off.
8. Writing tools
On-device English grammar checks use Harper in your browser. Automatic grammar checks send the selected post after a typing pause; you can turn them off in Writing settings. Choosing a rewrite style or translation also sends your draft through our Cloudflare Worker to OpenRouter and its model provider. We request providers that disallow data collection, but their processing and retention policies still apply. Drafts are not logged. Completed AI results are encrypted for up to 24 hours for request recovery, as described above. Thread drafts and up to 12 versions per language per post remain in tab memory until reload or closing. Cloudflare D1 stores request IDs, daily keyed hashes of network addresses, status and cost counters for abuse prevention; records older than seven days are removed during later writing requests. Post on X sends the chosen text to X only when clicked; you review and publish there.
9. Prompts & cost estimates
Playground price estimates update automatically after a typing pause. These checks do not run models or use credits.
The model playground requires a verified account. Checking prices sends your prompt to our Worker for a bound quote, without sending it to a model. Running sends the same prompt to each selected model through OpenRouter. We request providers that deny data collection; their processing and retention policies still apply. No account details, credentials, tools or previous answers are included. Completed replies and usage receipts are encrypted for recovery for up to 24 hours; raw prompts are not logged or saved as results. The current tab keeps your draft and replies. Daily keyed network hashes and seven-day cost/attempt records limit abuse.
Choosing Improve prompt sends your prompt and optional context through our Worker to OpenRouter and its model provider. It shares the writing service’s processing, credit and recovery rules. Saving a prompt stores its original, options and result in this browser only; delete it from Saved prompts or clear site data. The cost calculator processes sample text locally and never sends it for AI analysis. Its URL contains model selections and numeric estimates, never the pasted text.
10. Website checks & giveaways
Website checks request your public URL and its declared assets through Cloudflare. Reports may be cached for 10 minutes. Preview images load from the checked site's servers without a referrer. Avoid URLs containing private access tokens.
Pasted giveaway entry lists are sent to our Worker to draw winners, then discarded. X imports send the public post ID to TwitterAPI.io. Public user IDs, handles and matched actions are temporarily saved in Cloudflare D1, accessible through an unguessable import ID for 24 hours and deleted during later import cleanup. Source posts and filter rules are saved with published X results. Winner names, giveaway title, date, entry count and a SHA-256 fingerprint are stored in Cloudflare D1 and visible to anyone with the result link. Results are not listed in search indexes. Use public handles; do not include private personal details. Published results do not have a self-service edit/delete flow.
The X engagement exporter sends a public post ID to TwitterAPI.io to fetch replies, reposts or quote posts. Public user IDs, handles, names, post text, dates and available engagement counts are saved in temporary Cloudflare D1 snapshots. These are accessible through an unguessable import ID for 24 hours, then become inaccessible and are deleted during later import cleanup. Exports are not published as shareable result pages. CSV files are generated on your device. No private account data or email addresses are requested.
11. Payments
When credit checkout is available, opening it sends your account email to Dodo Payments to prefill the payment form. Dodo Payments handles payment details as merchant of record; CozyToolkit stores order identifiers, credit amounts, payment status and ledger entries in Cloudflare D1. Test purchases are kept separate from real paid balances. For privacy, account or support requests, email support@cozytoolkit.com. Support emails and their attachments are processed and stored by Resend; avoid including sensitive files or sign-in codes.
12. Tool suggestions
When you suggest a tool, we store your idea, description, chosen language and optional reply email in Cloudflare D1 for up to 12 months so we can review and respond. A daily keyed hash of your network address helps prevent spam and is removed from suggestions after seven days; raw IP addresses are not saved with suggestions. We send a private notification through Resend to the maker’s inbox. Those email copies follow the email services’ retention settings. Suggestions are not publicly listed or used for marketing. Contact support@cozytoolkit.com to ask about or request deletion of your submission.
13. Backend tools
The X and YouTube downloaders send the public link to our Cloudflare Worker, which requests media information and streams files from the platform. X post information may be cached for five minutes; YouTube information is resolved afresh. Media bytes are not stored on our servers. Audio conversion and combining video/audio tracks happen in browser memory. Thumbnails load from X or YouTube. IP addresses are used for rate limiting. Cloudflare may retain operational request logs.
API subtitle requests are processed in memory and not saved. We do not log request bodies or file contents.