Privacy policy
Last updated:
ZumaTools is published by Novpix LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States. This policy distinguishes tools that process files in your browser from tools that process files on our server, and both from the data involved in visiting the website or using an external service.
Files and text in the tools
Unless a tool says otherwise, our file editors and converters read and process selected files in your browser. They do not upload those files to a ZumaTools processing server. Calculations and text transformations also run on your device. Downloads are saved where your browser chooses; we do not have a copy from which to restore your work.
Local processing does not mean the website makes no network requests. Your browser still downloads the pages and code needed to run them, and the pages load advertising and analytics scripts that make their own requests to those providers. Our code does not pass the contents of locally processed files to them. Analytics, advertising and the external features described below have their own data flows.
Tools that process files on our server
A small number of tools, such as video conversion, do work that is impractical in a browser. These tools state on their page that files are processed on our server. When you use one, the file you select and the options you choose are uploaded to a server we operate, hosted by Hetzner in Germany (European Union). As with any web request, the server also receives connection information such as your IP address.
The uploaded file and the converted result are used only to produce your result. They are deleted automatically within one hour and are not used for any other purpose. If a file is sensitive and an in-browser tool can do the job, use that instead.
Email spam tester
The email spam tester gives you a one-time address on our mail server. The email you send to it is received and analysed on our server in Germany: we store the message (headers, body and attachments), the connection details of the server that delivered it (its IP address, host name and greeting) and the analysis report. To check the message, its sending IP address and the domains it contains are looked up in public DNS blocklists, and the message is scanned by a spam filter running on the same server; it is not sent to any other company. The report can be opened by anyone who has its link, so only share the link with people you trust. The raw message can be viewed only from the browser that created the test. The message and the report are deleted automatically after 7 days, or at once when you press Delete. The address accepts one message and never sends or forwards mail. To limit abuse, the number of tests per IP address is rate limited in memory.
Service status and outage reports
The service status page lets visitors report a problem with an online service. A report records the service you chose, the type of issue and the time of the report. To limit repeated or automated reports, the server stores a hash of your IP address combined with a secret value that changes every day; the IP address itself is not stored. Reports, including these hashes, are discarded after 7 days. Reports are used to show how many people are reporting a problem and are not linked to an account.
Data saved in your browser
Some features use local storage to remember favourites, recently opened tools, notes, preferences, game progress or scores. This data can remain after you close a tab. QR scanner history uses session storage, normally limited to that browser tab's session. These features do not provide an account or synchronise your work through a ZumaTools server.
Use a tool's delete or reset controls where available. To remove all locally saved data, clear the site data for zumatools.com in your browser settings. This can permanently remove notes and progress, so export anything you want to keep first. On a shared device, other people using the same browser profile may be able to see locally saved data.
Device permissions and outside services
- Camera, microphone and screen-recording tools request browser permission when you start them. Recordings and scans are processed in your browser. You can stop the tool and revoke permission through your browser or operating system.
- YouTube thumbnails load directly from YouTube's image servers. YouTube receives the requested video identifier and connection information such as your IP address.
- Text-to-speech uses voices supplied by your browser or operating system. Voices marked as online may send text to that provider for speech generation. Choose a local voice when available if you do not want to use an online speech service.
- Opening an external link, including a map or a link found in a QR code, takes you to another service governed by its own privacy policy.
Website analytics
When enabled, Google Analytics 4 helps measure page visits, tool interactions and errors. Analytics can include the page address, referring page, browser and device information, approximate location, timestamps and cookie identifiers. Tool events are intended to describe actions such as a download or a failed operation, rather than the contents of your files or the text being processed.
Google explains its practices in how Google uses information from sites that use its services. You can use the Google Analytics opt-out browser add-on on supported browsers. Blocking analytics does not prevent you from using the tools.
Advertising and cookies
The site shows advertising from third-party ad networks, currently Adsterra and Google AdSense. When ads are served, these providers and their vendors may place or read cookies and use device identifiers, web beacons and IP addresses to deliver and measure advertising.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
Each provider handles this data under its own policy: see how Google uses cookies in advertising and the Adsterra privacy policy.
You can opt out of personalised advertising by Google in Ads Settings (My Ad Center), and opt out of other participating vendors' use of cookies for personalised advertising at www.aboutads.info or, in Europe, www.youronlinechoices.eu. Turning off personalised advertising does not necessarily stop all ads or all measurement. Browser settings can also block or delete cookies.
Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent through Google's consent message — a Google-certified consent management platform set up in our AdSense account — before Google serves personalised ads to them. Refusing does not stop you from using any tool.
Hosting and contact messages
The hosting service receives the information needed to deliver a page, such as your IP address, requested URL and browser connection details, and may retain operational logs for delivery, security and troubleshooting. Locally processed file contents are not included in a request to retrieve a page.
If you email us, we receive your email address, message and any attachments you choose to send. We use those to respond and investigate the issue. A report may remain in our correspondence records while needed to handle the request and related obligations. Do not send sensitive documents when a description or a non-sensitive example will do.
Your choices and requests
Depending on where you live, you may have rights to access, correct, delete or restrict the use of personal information, object to certain processing, or complain to your local data protection authority. Contact support@zumatools.com to make a request about information held by us. We may need enough information to verify a request, but do not send identity documents unless specifically needed and a suitable method has been agreed.
Clearing local site data does not by itself erase information already held by an advertising provider, analytics provider or email service. Requests concerning those services may also need to be made through the provider's privacy controls.
Children
ZumaTools is a general-audience service and does not ask children to register or submit personal information. If you believe a child has sent us personal information through a contact channel, contact us so it can be reviewed and removed where appropriate.
Changes and contact
We may revise this policy when the site's features or data practices change. The date at the top identifies this version. Publisher contact details are on our contact page.