Your files. Your business.
Accounts & sign-in
Hosted AI results are encrypted in Cloudflare D1 for up to 24 hours so interrupted requests can be recovered without another charge. Uploaded media is not stored. Account credit receipts and hashed guest usage counters enforce allowances; expired result bodies are removed during subsequent requests. Guest everyday-tool counts are stored locally on your device.
Accounts are optional. Better Auth stores your email, display name, verification status and account/session records in Cloudflare D1. Google sign-in also provides a profile image and provider ID; provider tokens are encrypted at rest. A secure, HTTP-only cookie keeps you signed in for up to 30 days. Login codes are delivered by Resend, stored as hashes and expire after five minutes. We never log codes or email contents. Keyed email/network hashes and short-lived counters limit abuse. Expired sessions, codes and counters are removed during subsequent sign-in requests. Use Your account to access billing, update your display name or sign out other devices. Favorites, presets, files and drafts continue to be stored only on your device or in this tab, and are not synced to your account.
Your language preference and dismissed language suggestions are stored on this device. Dismissing a suggestion hides it for 30 days. Suggestions use your browser language, not your location.
Images & subtitles
Image conversion, compression, resizing, cropping, metadata removal and subtitle editing process files on your device. These files are not uploaded. Your image-editing batch stays in memory as you move between toolkit pages in this tab, until you clear it, close the tab or reload. Google sign-in temporarily checkpoints your workspace in local browser storage, then restores it when you return. The checkpoint is deleted after restoration; abandoned checkpoints expire after 30 minutes and are removed on a later visit. Nothing in that checkpoint is uploaded. Screenshot presets you choose to save keep their names and style settings locally until you delete them or clear site data. This browser saves your theme, starred tools, timezone choices and shortcuts to up to six recent tools. Remove favorites with their stars and clear recent shortcuts from the Saved menu. Timezone parsing happens on your device. The currency tool requests public reference rates from Frankfurter and caches them on your device for six hours; your entered amounts are not sent.
Creator studios & AI assistance
Screenshot styling, social image packs, annotations, favicon generation, QR codes, PDF editing, solid-color background removal and video quick edits run on your device. OCR uses Tesseract.js and may download language assets from jsDelivr and Project Naptha; those hosts receive asset requests and your network address, not your images. With automatic OCR language detection enabled, choosing Extract text sends a reduced image to OpenRouter and Google to identify languages; Tesseract extracts the text on your device. Choosing languages manually skips the hosted detection. Audio transcription sends a normalized recording to Cloudflare Workers AI when you choose Transcribe audio. CozyToolkit does not store these uploads or generated text on its servers. Provider processing and retention policies apply. Daily usage counters retain a rotating hashed network identifier, request ID and usage totals for seven days. Review AI output before use.
Adapting posts, using a writing style and translating subtitles use the same writing service and daily limits as the writer. A saved writing example is sent with rewrites only. Clear it under Polish → My writing style or clear site data. Image attachments and their descriptions remain in tab memory and are never included in AI requests. They survive tool navigation, but are cleared on reload or closing the tab. Download your draft to keep its text and images together. Continuing to X opens the text; attach the images in X yourself. Transferring extracted text to the writer adds new posts without overwriting existing drafts and leaves automatic AI checking off.
Writing tools
On-device English grammar checks use Harper in your browser. Automatic grammar checks send the selected post after a typing pause; you can turn them off in Writing settings. Choosing a rewrite style or translation also sends your draft through our Cloudflare Worker to OpenRouter and its model provider. We request providers that disallow data collection, but their processing and retention policies still apply. We do not store or log draft text or AI responses on our servers. Thread drafts and up to 12 versions per language per post remain in tab memory until reload or closing. Cloudflare D1 stores request IDs, daily keyed hashes of network addresses, status and cost counters for abuse prevention; records older than seven days are removed during later writing requests. Post on X sends the chosen text to X only when clicked; you review and publish there.
Website checks & giveaways
Website checks request your public URL and its declared assets through Cloudflare. Reports may be cached for 10 minutes. Preview images load from the checked site's servers without a referrer. Avoid URLs containing private access tokens.
Pasted giveaway entry lists are sent to our Worker to draw winners, then discarded. X imports send the public post ID to TwitterAPI.io. Public user IDs, handles and matched actions are temporarily saved in Cloudflare D1, accessible through an unguessable import ID for 24 hours and deleted during later import cleanup. Source posts and filter rules are saved with published X results. Winner names, giveaway title, date, entry count and a SHA-256 fingerprint are stored in Cloudflare D1 and visible to anyone with the result link. Results are not listed in search indexes. Use public handles; do not include private personal details. Published results do not have a self-service edit/delete flow.
The X engagement exporter sends a public post ID to TwitterAPI.io to fetch replies, reposts or quote posts. Public user IDs, handles, names, post text, dates and available engagement counts are saved in temporary Cloudflare D1 snapshots. These are accessible through an unguessable import ID for 24 hours, then become inaccessible and are deleted during later import cleanup. Exports are not published as shareable result pages. CSV files are generated on your device. No private account data or email addresses are requested.
Payments
When credit checkout is available, opening it sends your account email to Paddle to prefill the payment form. Paddle handles payment details as merchant of record; CozyToolkit stores order identifiers, credit amounts, payment status and ledger entries in Cloudflare D1. Test purchases are kept separate from real paid balances. For privacy, account or support requests, email support@cozytoolkit.com. Support emails and their attachments are processed and stored by Resend; avoid including sensitive files or sign-in codes.
Tool suggestions
When you suggest a tool, we store your idea, description, chosen language and optional reply email in Cloudflare D1 for up to 12 months so we can review and respond. A daily keyed hash of your network address helps prevent spam and is removed from suggestions after seven days; raw IP addresses are not saved with suggestions. We send a private notification through Resend to the maker’s inbox. Those email copies follow the email services’ retention settings. Suggestions are not publicly listed or used for marketing. Contact support@cozytoolkit.com to ask about or request deletion of your submission.
Backend tools
The X and YouTube downloaders send the public link to our Cloudflare Worker, which requests media information and streams files from the platform. X post information may be cached for five minutes; YouTube information is resolved afresh. Media bytes are not stored on our servers. Audio conversion and combining video/audio tracks happen in browser memory. Thumbnails load from X or YouTube. IP addresses are used for rate limiting. Cloudflare may retain operational request logs.
API subtitle requests are processed in memory and not saved. We do not log request bodies or file contents. No advertising or analytics scripts are installed in this release.