What never leaves
Inputs, outputs, files, passwords, tokens, keys and certificates are never uploaded. There are no analytics, tracking pixels, accounts or advertising scripts.
PRIVACY, IN PLAIN LANGUAGE
Your work stays yours.
Torito Tools is downloaded as a static application. Tool inputs and outputs remain in volatile browser memory and are not sent to Torito servers.
What is remembered
Working data lives in memory and disappears on reload. Only your theme and favorite tool names are stored locally on this device.
What Cloudflare sees
When loading or updating the app, Cloudflare receives ordinary connection metadata such as your IP address and requested asset path. It never receives tool contents.
Where the boundaries are.
A precise view of what the browser does, what the network sees and what clearing a session actually removes.
Offline by design
After the first successful visit, the application shell and all tools are cached for offline use. Browser-initiated update checks may request static files, but transformations never make network requests.
Clipboard and files
Clipboard writes happen only when you select Copy. Files are read with browser APIs and downloads are generated as local blobs. Clearing the workbench cannot erase information you already copied elsewhere.
Security boundaries
JWT verification confirms the key and claims you specify; it does not establish whether an issuer is trustworthy. Certificate inspection does not use an operating-system trust store or perform OCSP/CRL network checks.
Clear the current session
Reload the application to discard tool inputs and outputs currently held in memory. Locally saved preferences are not affected.