Last updated: February 2026
Privacy and Trust CenterMost byteflow.tools workflows process input and output in your browser. We do not collect, store, analyze, or upload browser-local tool payloads. Tools marked External request may contact the listed network target only when you explicitly run that action.
We use localStorage only for safe UI preferences such as theme, language, sidebar state, and local tool settings. Sensitive payloads, tokens, logs, file contents, and tool outputs are not meant to be stored there.
Analytics are limited to an allowlisted, cookie-free taxonomy for aggregate product signals. Allowed events include tool loaded, tool action, copy, download, search performed, related-tool click, and PWA installed. Search events record only query-length buckets and result counts; tool inputs, outputs, JWTs, secrets, logs, file names, file contents, image contents, hash values, full URLs, user IDs, and session IDs are never analytics fields.
Some tools may request external APIs or user-provided URLs to provide functionality. Those tools are labeled External request and describe the network purpose before you run them.
For privacy-related questions, open an issue on our GitHub repository or contact us via the Contact page.
This list is generated from tool manifests. These tools may contact the listed domains only for the disclosed purpose and only after the external-request action is chosen.
Instagram Photo Downloader
External requestRequests the Instagram URL you provide only after you confirm rights and click Download.
instagram.com
Vimeo Thumbnail Grabber
External requestLoads derived public Vimeo thumbnail image URLs only after you choose to load the preview.
vimeo.com, player.vimeo.com, vumbnail.com
YouTube Thumbnail Grabber
External requestLoads derived public YouTube thumbnail image URLs only after you choose to load the preview.
youtube.com, youtube-nocookie.com, youtu.be, i.ytimg.com
Byteflow processing stays in your browser. Some preferences and non-sensitive tool settings may be saved locally; sensitive payloads are configured not to persist by default.
