Privacy Policy

Localbox is designed to process PDF, document, image, and audio files in your browser. This policy explains the limited information we process when you use the website, how anonymous usage analytics work, and the choices available to you.

This policy applies to the Localbox website and its built-in tools. It does not cover third-party websites that may be linked from Localbox, including GitHub, Vercel, or Turso.

Files you select for a Localbox tool are processed locally in your browser, including by Web Workers and browser-based libraries. We do not upload your source files, generated files, document text, audio, images, or file names to our analytics database.

Depending on the tool and your browser, temporary working data may remain in browser memory while a task runs. Localbox may also use browser storage such as IndexedDB or the Origin Private File System (OPFS) for local workflow data. That data is controlled by your browser and can be cleared through your browser’s site-data settings.

To understand whether Localbox is being used and which tools are useful, the site creates a random UUID for each browser. The UUID is stored in that browser’s local storage under localbox.visitor-id. It is not an account, is not tied to your name or email address, and is not used for advertising or cross-site tracking.

When analytics are enabled, Localbox stores only the following records:

• the random browser UUID;
• timestamps for landing-page visits;
• the name of a completed Localbox operation, such as “Merge PDF”; and
• aggregate counters used to display unique visitors, total visits, and completed operations.

Localbox does not send your file contents, file names, document text, audio, images, selected options, or generated output to the analytics service. We do not use analytics events to make decisions about you, build profiles, serve targeted advertising, or sell personal information.

Anonymous analytics records are stored in a Turso/libSQL database. The application may be hosted by Vercel or another hosting provider. These providers may process ordinary technical connection information, such as IP addresses, request metadata, and security logs, in order to deliver and protect their services under their own terms and privacy notices.

We share data only as needed to operate Localbox: with hosting and database providers that deliver the service, when required by law, or to protect the security and integrity of the service. We do not sell or rent personal information.

Browser-local data remains on your device until the tool finishes, you remove it, or you clear Localbox site data in your browser. Anonymous analytics records are retained until they are deleted during maintenance or when they are no longer needed to understand service usage. Localbox does not currently apply an automatic expiration period to analytics records.

You can clear the Localbox browser UUID and local workflow data at any time through your browser’s site-data controls. Clearing the UUID prevents future events from being linked to the old UUID, but it does not automatically delete prior anonymous records held in the analytics database.

Depending on where you live, privacy law may provide rights to request access, deletion, correction, restriction, or objection. Because Localbox does not collect direct contact information, requests should include the browser UUID shown in the Localbox activity panel, if available, so we can locate the relevant anonymous record.

We use reasonable technical measures intended to protect the website and its analytics infrastructure. No internet transmission or storage system can be guaranteed completely secure. Please avoid uploading sensitive files to any web application unless you understand and accept the risks of using your device and browser.

We may update this policy as Localbox changes. The “Last updated” date at the top of this page will be revised when material changes are made. For privacy questions or requests, please open an issue in the Localbox GitHub repository and include your browser UUID only if you want us to locate an analytics record.