Privacy Policy

The short version: your images are never uploaded — the Generator and Converter do all of their work inside your browser, and there is no account system, so we hold no names, emails or passwords for visitors. What this site does use is Google Analytics to measure traffic and Google AdSense to show ads, and both of those set cookies in your browser. The rest of this page explains exactly what that means, tool by tool and vendor by vendor.

This policy covers favicon.toolsand all of its subpages (the "Service").

Your images: nothing is uploaded

Any image, icon, emoji or text you use in the Generator or Converter is rendered entirely in your browser using the HTML5 Canvas API — including resizing, recoloring, padding, and packaging the final .ico and .zip files. None of it is sent to a server. There is no upload step to intercept, no storage to breach, and nothing left behind once you close the tab. This is not a policy promise we could quietly change; it is how the tools are built.

The Generator's icon-search feature is the one exception worth naming precisely: when you search for or select an icon, your browser requests that icon's SVG directly from Iconify's public API (api.iconify.design). That search term and icon selection go to Iconify, not through our servers, and are subject to Iconify's privacy policy.

Checker: what happens when you check a URL

The Checker is the one tool that involves our server. When you submit a URL, our server fetches that page's public HTML — the same way a browser visiting the page would — reads its declared icons and web manifest, and checks whether each icon actually loads. The result is generated on the spot and returned to you. We don't save a history of URLs checked, build user profiles from them, or share them with anyone.

As with any web request, the hosting infrastructure serving this site keeps standard, short-lived technical access logs (IP address, user agent, requested path, timestamp) as a normal part of operating and securing the Service. That is infrastructure-level housekeeping, retained only briefly, not a database of your activity.

Cookies and similar technologies

A cookie is a small file a site or its partners store in your browser. This site does not set any cookies of its own for logins or preferences — there is nothing to log into. The cookies you will encounter here are set by two Google services:

Google Analytics

We use Google Analytics 4 to understand basic, aggregated traffic patterns — which pages are visited, roughly where visitors come from, and which of the three tools people actually use. It sets cookies (typically _ga and _ga_<container-id>) that distinguish one browser from another. We use this only in aggregate; we do not attempt to identify individual visitors, and we do not upload any personally identifying information to it. Google's handling of that data is described in How Google uses information from sites that use its services. You can opt out across all sites with the Google Analytics opt-out browser add-on.

Google AdSense and advertising cookies

This site is free to use and carries advertising to cover its running costs. Advertising is served by Google AdSense. In Google's own required terms:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising at aboutads.info or, in Europe, at youronlinechoices.eu.

Opting out of personalized ads does not remove ads — it means the ads you see are chosen without using your browsing history. A full list of the companies Google may work with is published in Google's advertising partners, and Google's own terms are covered by the Google Privacy Policy.

Managing cookies yourself

Every major browser lets you block or delete cookies, either entirely or per-site, from its privacy settings. Blocking them will not break the Generator, Converter or Checker — none of the tools depend on cookies to function.

Consent, and where you are

If you are in the European Economic Area, the United Kingdom or Switzerland, a consent message is presented before personalized advertising cookies are used, in line with the EU User Consent Policy and the GDPR. Your choice there controls whether ads on this site are personalized, and you can change it at any time by clearing this site's cookies and reloading the page.

If you are a California resident, you have the right under the CCPA/CPRA to know what personal information is collected and to opt out of its "sale" or "sharing" for cross-context behavioral advertising. We do not sell personal information for money. To opt out of the personalized-advertising use described above, use the Google Ads Settings link in the AdSense section, or write to us at the address below.

Legal bases and your rights (GDPR)

Where the GDPR applies, our legal basis for the short-lived server access logs and basic, aggregated analytics is our legitimate interest in operating and securing the Service; our legal basis for personalized advertising cookies is your consent. You have the right to request access to, correction of, or deletion of personal data we hold about you, to object to processing, and to lodge a complaint with your local data protection authority. In practice, we hold no account data to retrieve — but any request to contact@favicon.tools will be answered.

Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. There is no sign-up flow through which a child could provide any.

Data retention

We keep no user database. Server access logs are retained by the hosting provider only as long as needed for operations and security. Cookie lifetimes are set by Google and are documented in the Google links above.

Changes to this policy

If this policy changes, the "last updated" date above will change with it. Any change that meaningfully affects what data is collected or how it is used will be described clearly, not buried.

Contact

Questions about this policy, or any privacy request, can be sent to contact@favicon.tools. See also our Terms of Service and About page.