Short version.
HEIC, image compression, signing, invoices and the basic PDF tools run entirely in your browser. We do not receive those files. You can verify this in DevTools — the receipt on each tool reads live from performance.getEntriesByType('resource').
Document conversion tools such as PDF to DOCX, DOCX to PDF and PDF to image upload the selected file temporarily because they require server conversion software. We process the file in a temporary directory, return the converted download, and do not attach it to Active Storage.
Is It Down? checks are performed by our servers. We store each check's host, status, HTTP code and latency for 7 days to render the sparkline, then delete.
URL sets are stored indefinitely, but expire after 90 days of no visits.
We set a single cookie per board and per URL set to remember ownership. We use no analytics cookies. We do not have an email list.
Admin activity metrics are first-party server logs used to understand basic product usage. We store paths, response status, user account when signed in, user-agent, referrer, and a one-way hash of the IP address. We do not store raw IP addresses for these metrics.