This policy covers every page and tool on www.hcju.com (ToolMug). We try to collect as little as possible. Below is what is recorded, why, and for how long.
Files and text you use in tools
Most tools run entirely in your browser. The files you choose and the text you type are processed on your own device and are never sent to any server. These tools say “Runs in your browser — nothing you enter is uploaded” under the title.
A few tools need our server. They say “Processed on our server; nothing is stored” under the title:
- Network lookups: IP lookup, DNS lookup, WHOIS, SSL certificate check, HTTP header and link checks, port check, traceroute and similar. The domain, URL or IP you enter is sent to our server, which runs the lookup.
- HEIC to JPG: your photo is uploaded and converted in a temporary folder that is deleted as soon as the result is returned.
These requests are encrypted with HTTPS. Your input is discarded once processed; it is not stored in a database or used for anything else.
A few more tools only fetch public data from our server, such as exchange rates, the exact time or satellite passes, or relay the pairing details for browser-to-browser file transfer. Transferred files go directly between the two devices and never pass through our server; pairing details are kept in server memory only and deleted after 15 minutes. Setting up the connection also uses public STUN servers, which can see your IP address. Any other tool that contacts a third-party service says so on its page.
Analytics
To learn which tools are used and what needs work, the site measures visits:
- Our own analytics: when you open a page, your browser reports the page address, whether you used the tool (for example clicked a button, downloaded or copied a result), and the referring website (domain only). Our server also records your IP address and uses it to estimate your approximate location, network provider and device type. This data is summarised per day on our server and only the site owner can see it. Our own analytics sets no cookies and stores nothing in your browser.To count return visits, the server also keeps a one-way hash of your IP address and browser identifier, along with the date of your last visit, for up to 90 days. We also record whether a page stayed in the foreground for 15 seconds and whether a tool hit an error. Error summaries have quoted text and numbers removed; error messages shown on the page are only counted, and their text isn’t sent.
- Third-party analytics: the site also uses Google Analytics and Baidu Tongji. They set cookies in your browser and handle data under their own privacy policies (Google, Baidu).
Your choices: if your browser’s time zone is in Europe, you will see a cookie notice. No third-party analytics script loads and no analytics cookie is set until you click “Accept”. If you choose “Decline”, both third-party analytics and our own analytics stop, and you can change your mind any time with “Cookie settings” at the bottom of the page. Analytics is on by default for visitors elsewhere; if you would rather not be counted, block third-party cookies in your browser or use an extension that blocks analytics scripts.
Access logs
Like almost every website, our server and CDN automatically keep access logs: IP address, time, the requested address and browser user agent. These logs are used only to prevent abuse and fix problems, and are deleted automatically after a while.
Feedback and messages
The “Works well” / “Something’s wrong” feedback under each tool and messages sent through the contact page are stored together with the page, the time, your IP address and your browser user agent. We use them to fix problems and improve the tools.
The contact field on the contact page is optional. It is used only to reply to you, is never published and is never used for marketing.
Local storage in your browser
Some tools save your settings in your browser’s local storage, for example the cities in the world clock, a countdown date, an editor draft, your cookie choice, or whether you already left feedback today. This stays on your device, is never sent to us, and is removed when you clear your browser data.
What we don’t do
- No accounts: we never ask for your name, phone number or other identity details.
- We never sell, rent or trade visitor data.
- Apart from the analytics services mentioned above and the cloud services that host the site, we share no data with third parties unless the law requires it.
Where data is stored
Our servers are in mainland China. If you visit from another country or region, data from server-side tools and feedback is transferred to mainland China for processing.
Your rights
To see or delete feedback or messages you sent, tell us on the contact page with the rough time and content, and we will handle it as soon as we can. The daily analytics summaries contain no names or similar details, so we usually cannot tell which entries belong to you.
Changes to this policy
We update this policy when the site changes. The date at the top shows the latest revision, and significant changes will be noted here.