Privacy Policy
XXF Tools is designed to minimize the data required to use its browser utilities. This page distinguishes local converters from the few features that intentionally use a network or stored shared space.
Browser-local converter data
Text entered into converter editors and files selected for image, collage or video conversion are processed by code running in your browser. That input is not intentionally transmitted to or stored on XXF servers. Avoid processing sensitive material on an untrusted or shared device.
The redirect checker sends the public URL being tested to a restricted XXF endpoint so it can request the redirect chain. The M3U8 player connects from your browser to the stream host you enter. Those network tools cannot offer the same no-request behavior as a text converter.
Shared note spaces
Pages under /n/ are an explicit exception to browser-local processing. Their text is transmitted to XXF storage and automatically saved so the same named space can be opened again. Anyone who knows or guesses the space link can access its content, so shared spaces must not contain passwords, access tokens, personal records, private source code or confidential business information.
Chat rooms and uploaded media
Pages under /c/ store messages and generated device profiles in a database. Images and videos shared in a room are stored in the XXF Cloudflare R2 bucket and served from r.xxf.app. Anyone who knows or guesses a room link can view and post in that room. A random device identifier and room-owner key are kept in browser storage so clearing cookies alone does not replace the generated profile or owner access; clearing all site data can reset them. A room owner can permanently delete that room's messages and media and may copy a bearer link that grants the same access. Anyone with that owner link can clear the room.
Server logs and infrastructure
Infrastructure providers may process basic request information such as IP address, browser type, requested URL, response status and timestamps for security, reliability and aggregate traffic measurement. Converter editor contents are not part of ordinary page requests, except for the network and shared-space features described above.
Google advertising and cookies
XXF includes Google AdSense advertising code. When Google advertising services are active, a visitor's browser may send Google information such as the page URL and IP address, and Google or its partners may set or read advertising cookies. Third-party vendors, including Google, may use cookies to serve ads informed by a visitor's previous visits to this site or other sites. Google uses this information to deliver services, measure advertising, protect against fraud and, depending on the visitor's settings and consent, personalize ads.
Google explains this processing in How Google uses information from sites or apps that use its services ↗. Visitors can review or change ad personalization through Google Ads Settings ↗. Other advertising vendors may provide their own controls where their services are used.
Advertising scope
AdSense code is limited to the public tool directory, eligible text-oriented tool pages and individual technical guides. Shared notes, chat rooms, upload-heavy image and video workbenches, the stream player, the museum, the guide index, contact and policy pages, the sitemap and error pages do not include the AdSense loader. Advertising requests are separate from converter processing: a local conversion does not mean that the entire page makes no network requests.
Your choices
You can use the converters without creating an XXF account, clear browser site data, block cookies through browser settings and avoid shared spaces or network tools. Clearing site data resets the local chat identity. Blocking some requests may prevent advertising, stream playback or network-dependent features from working.
Questions and corrections
Use the contact and feedback page to report a privacy-documentation error or ask a question about the behavior described here.