Privacy policy

This policy describes how this specific application behaves. It is written to be checkable: where it says something stays in your browser, you can confirm that in your browser's network panel.

The short version

| What you give a tool | Where it is processed | Stored? |
| --- | --- | --- |
| Pasted text, TXT/CSV/JSON/Markdown files | Your browser | No |
| Pasted HTML, .html files | Your browser | No |
| Images for OCR | Your browser | No |
| PDF files | Your browser | No |
| URL lists for cleaning, de-duplication, domains | Your browser | No |
| A page or sitemap address you ask us to fetch | Our server | Only as temporary job state, for crawls |
| A YouTube video or playlist address | Our server, then YouTube's API | No |
| A contact or bug-report message | Our server | Yes — see retention below |

Processed in your browser only

The text tool, HTML tool, image OCR tool, PDF tool, domain extractor, duplicate remover and URL cleaner all run entirely in the page. The content you paste or open is never transmitted to us, never written to a server, and disappears when you close the tab.

The image OCR tool downloads an English language model (about 10 MB) the first time you use it, either from this site or from a public CDN, and your browser caches it. That request contains no part of your image.

Sent to our server

Some things genuinely cannot happen in a browser. Reading another website requires a request from a server, because browsers deliberately prevent a page from reading a different site's content.

Single page fetch, sitemap fetch, image URL fetch. We receive the address, fetch it, extract from the response, and return the result. The address and the response are not stored.

Website crawl and sitemap-index expansion. These run as a series of short steps, which means progress has to be saved between them. We store: the start address, your settings, the queue of addresses still to visit, the addresses already visited, the links found so far, and any errors. That row is tied to an unguessable token held only by your browser — without it, the job cannot be read by anyone, including us through the public API. It is deleted automatically after the retention period shown while the job runs (24 hours by default), and expiry is enforced on read as well as by the cleanup job.

YouTube live modes. We send the video or playlist id to the official YouTube Data API using our own key and return what it gives us. Nothing is stored.

Logs

Our hosting provider records standard request information — time, path, status code, approximate region, user agent — as part of running the service. We do not add the contents of your input to logs, and we do not put anything you submitted into a URL path or query string, so nothing you extract can end up in a log line.

Rate limiting

Expensive endpoints are rate-limited. To do that without storing your IP address, we keep a keyed hash of it alongside a counter and a window expiry. The hash cannot be reversed to an address. Counters are deleted once their window closes.

Contact and bug-report submissions store the same kind of hash, so repeated abuse from one source can be recognised.

Contact and bug reports

A message you send is stored with the name, email address, subject and body you provided so we can reply. Default retention:

• New and open messages: 180 days
• Resolved messages: 90 days
• Messages marked as spam: 14 days

These are configurable by the site owner, and the values above are the defaults shipped with this site. Deletion is performed by a scheduled job.

Cookies and local storage

We set no tracking cookies. The only cookie this site can set is the session cookie for the administration panel, which is only ever issued to a signed-in editor — a visitor using the tools never receives it.

Your browser's local storage is used for small conveniences that never leave your device: your light/dark theme choice, the site guide's recent conversation, and the reference to an unfinished crawl so it can be resumed. Clearing site data removes all of it. The cookie policy lists each key.

Analytics and advertising

This site supports optional Google Analytics and Google AdSense, both switched off unless the owner has configured them. While they are off, no script from either is loaded and no request is made to them.

If the owner enables analytics, the setting for whether it waits for cookie consent is also in their hands. You can check what is actually loading on any page using your browser's network panel — which is a better answer than a policy paragraph.

What we never do

• We do not sell or share your data. There is nothing to sell: the tools that handle your content never send it to us.
• We do not build a history of what you extract.
• We do not put your input into shareable links. The "Share this page" buttons build their link from the page address and title only.
• We do not require an account to use any tool.

Children

This is a general-purpose utility site. It is not directed at children and collects no information about anyone's age.

Your choices

• Use only the browser-based tools, and nothing about your content reaches us at all.
• Cancel a crawl at any time; the job is marked cancelled and deleted on the normal schedule.
• Clear your browser's site data to remove every local preference this site has set.
• Email urlextracter.in@gmail.com to ask what is held about a message you sent, or to have it deleted.

Changes

Material changes to this policy will be reflected in the "last updated" date at the top of this page.