Privacy & cookies.

Privacy, GDPR and personal-data requests: privacy@onekit.org. Last updated: 23 October 2026.

Your files

Tool inputs and outputs are processed in your browser’s memory. OneKit does not upload local tool inputs or outputs automatically, or include their content in usage events. Explicitly publishing a whiteboard or message uploads the shared copy. Clear results or close the page to release them. Downloaded results remain on your device until you remove them.

Shared whiteboards and messages

Sharing stores a compressed .1kit copy, type, encryption flag and expiry. Email verification is required to publish; your email is not attached to a copy. An optional password encrypts the copy on your device with AES-GCM before upload. OneKit receives neither password nor decryption key. Without a password the copy is unencrypted and anyone with the link can read it. Published content and expiry cannot be edited. Access stops at expiry; expired copies are removed automatically. Shared viewing pages contain no analytics or advertising scripts. Expiry cannot remove copies saved by recipients.

Source links and URL inspection

Audio, video and image downloaders, license-source links and URL Inspector contact the requested source directly from your device. The source receives normal connection information, including your IP address and the requested URL. No input file, source URL or inspection report is sent to a OneKit processing server. Browser downloads omit source login cookies; CORS and source restrictions may prevent access.

Inviting friends

If you choose to invite friends, we send your verified email address and the recipient addresses to Resend for delivery. Each friend receives a separate invitation that identifies your email address; the other recipients are not shown. Invitations do not subscribe anyone to a mailing list. OneKit does not save the plain-text invitation addresses in its database. Each send accepts up to five recipients, with a 30-second pause between sends. Only a temporary sender-derived cooldown key is retained; no recipient hashes or sender-recipient associations are saved. Recipients can be invited again after the pause. Resend delivery records follow the provider’s and operator’s retention settings.

Runtime downloads

The Python runtime downloads directly from jsDelivr. The Inter font is hosted by OneKit. Selected tools download optional Python packages directly from PyPI or the Pyodide package CDN while their workspace prepares or when you run them. Public runtime downloads are cached on your device for reuse across visits. This cache contains no input files or results. These providers receive normal connection information, including your IP address; they do not receive your file contents.

Essential storage

A local preference stores your cookie choices. Feedback, URL shortening and friend invitations use a Secure, HttpOnly, SameSite session cookie for up to 24 hours after email verification. These are necessary to remember your settings and prevent duplicate votes.

Anonymous tool counts

OneKit counts successful tool uses in aggregate, without cookies or an account. Counts contain a tool identifier and a day. An HMAC of the connection address is retained for at most 48 hours solely to limit abuse; it is not published. These counts are approximate and not an identity or analytics profile.

Tool ratings

Likes and dislikes are approximate, anonymous indicators. OneKit stores only a tool identifier and its total like and dislike counts, resetting all totals every 15 days. Rating records contain no IP addresses, browser identifiers, email addresses or participant history. A choice is remembered only in your browser’s local storage to discourage repeat votes; it is not an authentication mechanism and can be cleared. Voting does not create an account or require email verification.

Ideas, votes and email verification

When feedback is enabled, public posts and votes are stored in Cloudflare D1. A keyed identifier (HMAC) derived from your email is stored with your feedback posts and votes. It lets OneKit link activity from the same verified address and prevent duplicate votes on the same request. This is pseudonymization, not complete anonymization: an operator with the secret key can check whether a known email matches an identifier. The identifier and vote records are not automatically deleted when the 24-hour session expires; verifying the same address again does not allow another vote on the same request. Your email address is sent to Resend to deliver verification codes for feedback, short links and friend invitations; it is not stored in plain text in D1. Resend may retain recipient addresses, message contents (including verification codes), delivery metadata and logs according to its policies and the operator’s retention settings. A code expiring in OneKit does not mean that Resend has deleted the email or its delivery records. Codes expire after 10 minutes; sessions expire after 24 hours. Public posts remain until moderation or a removal request. Votes are anonymous to other visitors, not guaranteed untraceable to the operator or service providers.

Short links

URL shortening uses the same email verification session as feedback. The destination URL, short name, creation time and expiry are stored in Cloudflare D1, without an email, participant identifier or session attached to the link. Your email is sent to Resend to deliver the one-time code; it is not stored in plain text in D1. The Resend retention information in “Ideas, votes and email verification” also applies here. Temporary HMAC rate-limit keys prevent abuse. Anyone with a short link can open its destination. Links stop redirecting at their expiry time and expired records are deleted daily at midnight in Europe/Rome. D1 backups and provider connection logs follow their configured retention. Short links are not a private storage service; avoid URLs containing secrets.

Daily operational reports

We keep hourly aggregate counts of tool operations, errors, likes and dislikes, feedback submissions and votes, created short links, shared documents, sent invitations and verification activity for 30 days. A daily summary is emailed to the site operator through Resend. These counts contain no visitor identifiers or user content; emails contain only aggregate totals and tool/error categories. Public like/dislike counters continue to reset every 15 days; historical aggregate counts are retained for reporting. Report snapshots in our database are deleted after 30 days. Delivered emails follow the operator mailbox and mail provider retention.

Technical error diagnostics

When a tool fails, OneKit sends only its tool identifier and a predefined error category to our own service. Daily aggregate counts are stored in Cloudflare D1 for up to 30 days to diagnose failures and maintain the service. Reports contain no file contents, filenames, input URLs, raw error messages, stack traces, cookies, session identifiers or browser fingerprints. The reporting request omits cookies and referrers. Network providers necessarily process connection information to deliver requests; IP addresses and user agents are not stored in the error database. This diagnostic feature uses no cookies or device storage and is separate from optional analytics.

Optional analytics and advertising

When the Google tag is configured, Analytics and its Google advertising features are enabled by default for visitors without saved preferences. This includes advertising storage, advertising user data, personalization signals and Google Signals. You can disable Analytics or advertising separately through Cookie settings in the footer, and saved refusals remain respected on later visits. Disabling these optional services does not prevent access to tools. Advertising features associated with Analytics are separate from displaying ad placements; OneKit does not load a standalone ad-placement script here.

Microsoft Clarity

The Analytics preference also controls Microsoft Clarity (project z1s88ajs11), which records page interactions, session replays and heatmaps. Clarity loads only while Analytics is enabled, follows the Advertising preference for advertising storage, and stops recording when Analytics is disabled. Main page content, including tool workspaces, is masked in recordings. Microsoft receives usage and connection information under its Privacy Statement. You can change these preferences through Cookie settings.

Infrastructure and requests

Cloudflare, GitHub download hosting, Resend, Microsoft Clarity and any consented Google services may process connection data according to their own terms. Hosting and security logs are controlled in their respective dashboards. You can request removal of feedback data by contacting the address above.