Privacy Policy

1. Client-Side File Processing Architecture (Zero Server Uploads)

Thiveo Tools (tools.thiveo.com) is built on an in-browser execution architecture. When you utilize the Image Compressor, Image Converter, or JSON Formatter & Validator:

• 100% In-Browser Execution: Your photos, graphics, documents, and JSON code are decoded, processed, compressed, or formatted entirely inside your web browser's local execution environment via standard Web APIs (such as HTML5 Canvas, createImageBitmap, and native JSON parsers).
• Zero Remote Server Uploads: Your files and code never travel over the network to Thiveo backend servers, cloud databases, or third-party storage infrastructure. Everything remains contained on your local device.
• Ephemeral Object URLs: Any temporary blob URLs created for previews and downloads exist solely in browser RAM and are immediately revoked when files are deleted or when the session closes.

2. Information We Do Not Collect

Because our utilities are designed for instant utility without friction:

• We do not require user accounts, email registration, passwords, or profile creation.
• We do not collect credit cards, billing information, or payment details.
• We do not inspect, log, aggregate, sell, or train machine learning models on your file contents, compressed images, or parsed JSON code.

3. Web Server Access Logs

Like all public web properties, our hosting infrastructure automatically records standard, non-personally identifiable network connection metadata when your browser requests web page resources (such as HTML documents, CSS stylesheets, JavaScript bundles, and static icons).

These logs may include: your IP address, browser user-agent string, referring URL, request timestamp, and HTTP response codes. This telemetry is retained temporarily and exclusively for operational server security, debugging network connectivity, and mitigating automated denial-of-service (DDoS) attacks. These logs never contain your tool input files or processed data.

4. Analytics, Tag Management & Google Consent Mode v2

To understand website reliability, diagnose broken interfaces, and observe aggregate traffic patterns, we implement measurement services governed strictly by Google Consent Mode v2.

• Google Analytics 4 (GA4): Aggregates page view statistics, general geographic region, and device categories without storing raw user payloads.
• Google Tag Manager (GTM): Manages measurement script execution under strict consent rules.
• Consent Mode v2 Signals: Before measurement scripts execute, default consent signals are initialized with privacy-protective states:
  • analytics_storage: Denied by default until user consent is granted.
  • ad_storage, ad_user_data, ad_personalization: Denied by default.
  • functionality_storage, security_storage: Granted exclusively for core website security and basic functional operation.

5. Microsoft Clarity Session Insights & Input Masking

We utilize Microsoft Clarity to analyze user behavior through aggregated heatmaps and anonymous session replays, helping us identify usability bugs, unresponsive buttons, and layout defects.

• Strict Input Masking: All sensitive tool input areas (including the JSON code editor textarea, file queue metadata, and image previews) are tagged with data-clarity-mask="true". Your file names, image previews, and JSON contents are strictly masked and obscured from replay recordings.
• Cookie Consent Hold: Clarity tracking cookies are placed on hold by default via Clarity's consent API until analytics consent is recorded.

6. Future Google AdSense Integration & Certified CMP

To keep Thiveo Tools free and accessible, future releases may incorporate display advertising partners via Google AdSense once publisher review is complete.

In accordance with Google's EU user consent policy and the IAB Europe Transparency and Consent Framework (TCF v2.2), visitors in the European Economic Area (EEA), the UK, and Switzerland will be presented with Google's certified Consent Management Platform (CMP) — Google Privacy & Messaging — allowing explicit consent choices (Consent, Do not consent, Manage options) before advertising tags operate.

7. Cookies & Local Storage Disclosures

8. Managing and Revoking Your Consent Preferences

You maintain full control over your privacy preferences. You can view, modify, or revoke your consent at any time:

• Click the “Privacy & Cookie Settings” link located in the footer of any page across Thiveo Tools.
• When clicked, the link re-invokes Google's certified CMP revocation message (if active in your region) or our accessible preference manager to modify your selections.
• You can also clear cookies and site data directly through your web browser's privacy settings at any time.

9. Contact & Inquiries

If you have questions, feedback, or compliance inquiries concerning our privacy architecture, you may reach out directly to the Thiveo privacy desk at contact@thiveo.com.

Disclaimer: This policy details our technical data practices and privacy controls. While designed to conform with modern data protection standards including GDPR and CCPA, nothing herein constitutes formal legal advice.