Privacy Policy

Tools that run in your browser

Calculators, converters, text, PDF and image tools process what you type or open directly in your browser. Those inputs and files are not sent to our servers or stored by us.

Your account

If you create an account we store your name, e-mail address, how you sign in (Google, or a secure hash of your password, never the password itself), the language you used, the date you accepted the terms, your sessions (with the IP address and browser that started them) and your daily usage counters. With Google we receive only your name and e-mail; your photo is not stored. To stop several accounts from multiplying the limits, we also count uses per connection with a pseudonymous identifier of the IP (a one-way hash; the IP itself is not stored). Legal basis (LGPD/GDPR): performance of the service you asked for and our legitimate interest in security. We also keep the country the account was created from, as detected by Cloudflare from your connection (never your city or address). To understand how the site is used, we also keep a history of what you generated (audio, AI dialogue or AI text, voice language, size, duration, time taken and whether it worked), never the text itself. If you answer the optional question "How did you find UtilLab?", we keep that answer with your account.

Text to speech

When you generate audio, the text you typed and the chosen voices are sent to Microsoft’s online speech service (the same voices used by the Edge browser), which converts them into audio. The audio file is created in memory and sent straight back to your browser: it is never saved on our server. Your browser keeps your last 10 audios for 7 days; you can delete them on the page.

AI writing

Requests to the AI features (your text and the answer) are processed by AI providers through OpenRouter, which may keep them under their own policies, so do not send personal or sensitive data. We keep them in your account until you delete it, to prevent misuse. In the Studio (closed beta), your projects, their chat and media are kept in our own storage until you delete them or your account. The AI pictures that are generic (made from words only, never from your pictures or uploads) may be shown anonymously to other Studio users to reuse, unless you turn that off in the Studio library.

How long we keep data

• Audio files: never stored on our server; your browser keeps the last 10 for 7 days. • Account and sessions: kept while the account exists; sessions expire after 30 days without use. • Job records (no text once finished) and daily counters: deleted after 24 hours and 2 days. • AI requests: kept until you delete your account. • Deleting your account in My account removes your data immediately. • Usage history (no text): 6 months, and deleted with the account. • Ratings you send (stars, optional comment and the page address with the chosen options): kept to improve the site; those sent while signed in are deleted with the account.

Cookies and Local Storage

UtilLab stores a few small preferences in your browser, such as the light or dark theme, your language and the last currency you picked. These values stay on your device. If we display advertising, Google and its partners may place cookies or use similar technologies to serve and measure ads, as described in the Advertising section below. We also note which site brought you to UtilLab (for example, a search engine or chatgpt.com); if you create an account, it is saved with it.

Advertising

We may show ads served by Google AdSense. Google uses cookies, including the DoubleClick cookie, to serve ads based on a user's visits to this and other websites. You can opt out of personalised advertising at adssettings.google.com, and you can read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites. Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), ads that use cookies or personal data are shown only after you give consent.

Log Files

Our web servers automatically collect standard log information, including IP addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and pages visited. This information is used solely for website administration, troubleshooting, and analyzing usage patterns. This data is not linked to any information that is personally identifiable.

Third-Party Services

UtilLab uses some third-party services to monitor and analyze the use of our service and to improve our website's performance:

• Google Sign-In: optional login with your Google account • Umami (self-hosted): privacy-friendly, cookieless usage statistics • Google Analytics: visit statistics (with cookies; without cookies in the EEA, the UK and Switzerland) • Google AdSense: advertising (only when ads are enabled) • Microsoft Edge online speech service: converts text into audio (text to speech) • OpenRouter and AI model providers: AI dialogues and texts • E-mail delivery provider: sends confirmation and password reset e-mails • Cloudflare: network protection, content delivery and the Turnstile anti-robot check • Better Stack: server log management

Public data we look up

To show rates, prices and tables (Banco Central do Brasil, CoinGecko, BrasilAPI/FIPE and similar public sources), our server queries these services and keeps the answers in a cache. These queries carry no information about you: only the item being looked up (a rate series, a coin, a vehicle code). Image conversions, including HEIC photos, run entirely in your browser and the files are never uploaded. The password leak checker sends only the first 5 characters of the password's SHA-1 hash, through our server, to Have I Been Pwned; the password itself never leaves your browser.

Data Security

All traffic uses HTTPS, the services that process audio and AI requests are only reachable from our private server network, IP addresses are only stored as pseudonymous hashes, and audio files are never written on our server.

Your rights

You can see your data in My account, delete your audio in your browser, and delete your account at any time. You can also contact us to exercise the rights given by the LGPD (Brazil) and the GDPR (Europe), such as access, correction, deletion and information about sharing.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'last updated' date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: [email protected]