Privacy Policy

CTF Tools is designed from the ground up to respect your privacy and secure your challenge data.

100% Local Processing

All data you enter into this tool—whether it's pasted text, uploaded files, or generated keys—is processed entirely within your web browser.

• No backend servers: We do not have backend servers that receive your data.
• No file uploads: When you "upload" a file to a tool (like the hex viewer or file hasher), the file is read locally using the HTML5 File API. It never leaves your computer.
• No analytics: We do not use Google Analytics, tracking pixels, or any other telemetry.
• No accounts: There are no user accounts, logins, or sessions.

Local Storage

To improve your experience, CTF Tools uses your browser's standard localStorage API to save your preferences. This data remains exclusively on your device.

We store:

• Your favorite tools
• Your most recently used tools
• Your local "Scratchpad" notes
• Your saved Workbench pipelines

Third-Party Dependencies

CTF Tools is built to use native browser APIs (like WebCrypto) wherever possible. In the few cases where a third-party library is required (for example, for MD5 hashing since WebCrypto does not support it), the library is bundled directly with the site. We do not load scripts from third-party CDNs at runtime, preventing potential tracking by those CDNs.

Static Hosting

This site is statically hosted. The hosting provider (such as Cloudflare Pages or GitHub Pages) may temporarily log standard web server access logs (IP address, user agent, requested URL) as part of their baseline infrastructure, but this logging contains no application data or inputs.