Metadata Tools
Zero-Knowledge Architecture Guarantee

Privacy Policy

Last updated: September 2026. At Free Metadata Tools, privacy is not just an afterthought or a marketing claim—it is the structural foundation of our entire technology.

⚡ 100% In-Browser
Files are processed locally on your device CPU. No server uploads.
🔒 Zero Retention
We store zero documents, images, videos, audio tracks, or metadata.
🚫 No Tracking
No cross-site advertising cookies or behavioral user profiling.
🌐 Direct Cloud APIs
Cloud imports and exports communicate directly with official endpoints.

1. The Zero-Knowledge Client-Side Guarantee

Traditional online file conversion and metadata tools require you to upload private files to their remote cloud servers. This exposes your personal photos, sensitive contracts, confidential PDFs, and family videos to server storage, internal logs, data breaches, and unauthorized interception.

Free Metadata Tools operates on a fundamentally different model: All parsing, metadata inspection, sanitization, scrubbing, and encoding takes place entirely inside your local web browser using WebAssembly (WASM), Web Workers, and modern JavaScript standards. When you drag and drop a file into our tool, it is loaded into your browser's volatile memory (RAM) and processed on your own hardware. Your files never touch our servers, and they are never transmitted across the network.

2. Information We Never Collect

Because of our architectural design, we physically cannot access, collect, or store:

  • Your Files and Media: Photos (JPEG, PNG, WebP, HEIC, TIFF), documents (PDF), videos (MP4, MOV, AVI), and audio (MP3, WAV, FLAC).
  • Extracted Metadata: EXIF tags, GPS coordinates, camera models, lens serial numbers, creator names, software history, creation timestamps, or copyright details.
  • User Profiles: We do not require account creation, logins, passwords, phone numbers, or credit card details to use any of our core file inspection and scrubbing tools.
  • Content Search Queries: The file names, document titles, or contents parsed during local sessions are never logged.

3. Minimal Operational & Passive Data

Like virtually all web properties delivered via Content Delivery Networks (CDNs), our hosting infrastructure (Cloudflare) passively logs standard network connection data required to maintain website availability, mitigate DDoS attacks, and prevent fraudulent abuse:

This passive technical telemetry cannot be linked to the content of any file processed in your browser. We do not use persistent advertising trackers, third-party analytics pixels (such as Meta Pixel or TikTok Tracker), or commercial data brokers.

IP Addresses & Request Timestamps

Standard CDN edge logs retained temporarily by Cloudflare for network security, rate-limiting, and infrastructure health monitoring.

Browser & Device Type

Basic User-Agent headers to deliver the correct WebAssembly compilation target and screen styling.

Essential Preferences

Your selected UI theme (light/dark mode) is stored exclusively on your device in localStorage and is never transmitted to our servers.

4. Cloud Storage Providers (Google Drive & Dropbox)

To provide convenient file selection from Google Drive or Dropbox without compromising privacy, our integration operates strictly client-side using industry-standard OAuth 2.0 PKCE protocols:

Your OAuth access tokens are held exclusively in temporary browser session storage and are discarded as soon as your session ends or you refresh the page. We never store your credentials on any database.

  • Direct Browser-to-Cloud Communication: When you select a file from Google Drive or Dropbox, your browser establishes an encrypted HTTPS connection directly with Google's or Dropbox's API servers.
  • Restricted Scope: We request only the absolute minimum read access necessary to fetch the single file you pick.
  • Zero Cloud Relay: The downloaded file is streamed directly into browser memory for scrubbing. It never passes through our servers.

5. Third-Party Links & External Services

Our website may contain links to external websites, documentation, or social platforms. If you click on an external link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites.

6. Data Security Measures

Because all computation executes on your client device, your data security is fundamentally superior to server-based utilities. All files stay within your device's operating system sandbox. When you close or refresh the browser tab, all file buffers and in-memory caches are instantly destroyed by the browser's garbage collection.

7. User Rights Under Global Privacy Regulations (GDPR & CCPA)

Because we do not collect, process, or store personal data, we practice data minimization by default. European Union (GDPR) and California (CCPA/CPRA) residents have the right to know what data is collected. Our answer is simple: We collect zero personal files, zero metadata, and zero personal profiles. You can use our suite anonymously at all times without leaving a footprint.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect technological updates or legal requirements. Any modifications will be posted on this page with an updated revision date. Your continued use of the website signifies your acceptance of any revisions.

9. Questions or Privacy Inquiries?

If you have any questions, suggestions, or concerns regarding our privacy architecture, feel free to contact our privacy team directly at: