Privacy Policy

Browser-based tools

Almost all Tabreon tools (text, developer, QR, image, and PDF tools) run entirely in your browser using JavaScript and WebAssembly. Your files and text never leave your device for these tools — nothing is uploaded to, or stored on, Tabreon servers. See how it works for a step-by-step breakdown.

Server-side tools (HEIC Converter, SVG to PNG)

Two tools are an exception: the HEIC Converter and SVG to PNG converter. Browsers can’t decode HEIC or render SVG-to-raster natively, so these files are uploaded to our server and processed using a WebAssembly decoder running on Cloudflare Workers.

The uploaded file exists only in memory for the duration of the conversion request. It is not written to disk, not logged, and not retained after the response is sent — successful or not. These endpoints are also rate-limited per visitor to prevent abuse.

Information we store

A small number of features require sending data to our servers to work, stored in our database (Cloudflare D1):

• Feedback form — the tool/category you select, your rating, and any comments you write.
• Early-access signup — your email address and the features you selected.
• Feature requests & voting — the request text you submit, and a randomly generated visitor ID (see Cookies below) used to prevent duplicate votes.
• Sign-in (optional) — if you choose to sign in, your email address, and a session record tied to a random session ID (see Cookies below). We don’t require a password; signing in emails you a one-time link instead. The one-time link itself is stored only as a hash, expires after 15 minutes, and is deleted once used.

These forms are protected by Cloudflare Turnstile, a privacy-friendly bot-verification service, to prevent spam. We only store what you explicitly submit or sign in with — we do not collect names, physical addresses, or payment information anywhere on the site, and there is no paid tier yet.

Third-party service providers

Tabreon runs entirely on Cloudflare’s infrastructure: Workers (application hosting), D1 (database), Turnstile (bot protection), and Web Analytics (traffic measurement). Cloudflare processes data on our behalf as an infrastructure provider under its own privacy policy. If you sign in, we use Resend to deliver the one-time sign-in email to your address — Resend only sees the email address and link needed to send that message. We do not sell or share your data with advertisers or data brokers.

Analytics

We use Cloudflare Web Analytics, which is cookie-free and does not fingerprint visitors, to see aggregate page views and tool usage counts. No personally identifiable information is collected, and no cross-site tracking is performed.

Cookies

We store your theme preference (light/dark) in localStorage, not a cookie. The feature-request board sets a single functional cookie — a random visitor ID — so we can prevent duplicate votes from the same visitor. If you sign in, we set a second functional cookie — a random session ID — so we know you’re signed in; it’s cleared when you sign out or after 30 days. Neither cookie is linked to advertising or cross-site tracking.

The banner shown on your first visit records your choice about optional cookies (such as advertising) in your browser’s localStorage. Tabreon does not currently load any optional cookies. If that changes, they will stay off unless you have chosen “Allow optional cookies”, and we will update this policy first. You can change your choice at any time with the “Cookie settings” link in the footer.

Data retention

Server-side tool uploads (HEIC/SVG) are never retained — see above. Feedback, early-access signups, and feature-request data are kept indefinitely to help us prioritize the roadmap, unless you request deletion (below). Sign-in tokens are deleted once used or after they expire (15 minutes); sessions expire automatically after 30 days of being issued. Your account (email address) is kept until you request deletion.

Your rights

Tabreon doesn’t yet have a self-service way to view or delete stored data, including account data. If you’d like us to delete your feedback, early-access signup, feature-request submission, or account (email address and any sessions), email us at the address below with enough detail to identify your entry (e.g. the email address you signed up or signed in with) and we’ll remove it. You can sign out of your own session at any time from the account page, which clears the session cookie immediately.

Children’s privacy

Tabreon is not directed at children and we do not knowingly collect personal information from anyone under 13. If you believe a child has submitted information to us, contact us and we’ll delete it.

Changes to this policy

We may update this policy as Tabreon adds features. Material changes will update the “Last updated” date above; we encourage checking back periodically.

Contact

Privacy questions: hello@tabreon.com