Privacy & cookies.
Privacy questions: hello@mattiapiazzalunga.com. Last updated: 16 October 2026.
Your files
Tool inputs and outputs are processed in your browser’s memory. OneKit does not upload them, store them on its servers, or include their content in usage events. Clear results or close the page to release them. Downloaded results remain on your device until you remove them.
Runtime downloads
The Python runtime and Inter font download directly from jsDelivr. Selected tools download optional Python packages directly from PyPI or the Pyodide package CDN while their workspace prepares or when you run them. Public runtime downloads are cached on your device for reuse across visits. This cache contains no input files or results. These providers receive normal connection information, including your IP address; they do not receive your file contents.
Essential storage
A local preference stores your cookie choices. Feedback uses a Secure, HttpOnly, SameSite session cookie for up to 24 hours after email verification. These are necessary to remember your settings and prevent duplicate votes.
Anonymous tool counts
OneKit counts successful tool uses in aggregate, without cookies or an account. Counts contain a tool identifier and a day. An HMAC of the connection address is retained for at most 48 hours solely to limit abuse; it is not published. These counts are approximate and not an identity or analytics profile.
Ideas, votes and email verification
When feedback is enabled, public posts and votes are stored in Cloudflare D1. An HMAC of your email links a vote to a verified participant without publishing the email. The email is sent to Resend solely to deliver a verification code and is not stored in D1. Codes expire after 10 minutes; sessions expire after 24 hours. Public posts remain until moderation or a removal request. Votes are anonymous to other visitors, not guaranteed untraceable to the operator or service providers.
Optional analytics and advertising
Google Analytics and Google advertising are disabled until configured and until you opt in to their respective categories. Rejecting them does not prevent access to tools. You can change your choice through Cookie settings in the footer. Where a Google certified consent platform is required for advertising, it must be configured before advertising can be enabled.
Infrastructure and requests
Cloudflare, GitHub download hosting, Resend and any consented Google services may process connection data according to their own terms. Hosting and security logs are controlled in their respective dashboards. You can request removal of feedback data by contacting the address above.