Zero-Knowledge Architecture

Privacy Policy

Last Updated: October 25, 2026 • Effective Date: January 1, 2026

Core Privacy Pledge: At TiBox (accessible at tibox.site), your privacy is not merely a policy; it is an architectural guarantee. Every tool on TiBox executes 100% locally inside your device's web browser (client-side). We do not collect, store, transmit, or inspect your files, tokens, passwords, or data.

1. Information We Do NOT Collect

Unlike conventional web utility converters, TiBox operates under a strict Zero-Server architecture. When you use our utilities:

  • No Document or File Uploads: When you process PDF files or photos with our tools, the binary data is read directly into your local browser RAM via the HTML5 File API. No files are ever sent to remote servers or cloud storage buckets.
  • No Secret or Token Logging: When you debug JSON Web Tokens (JWTs) or generate Diceware passwords, the calculations execute via the W3C Web Cryptography API inside your browser. Tokens and passphrases never touch a network socket.
  • No User Accounts or Credentials: TiBox requires zero sign-up, login, email verification, or personal identification to use any tool.

2. Technical Data & Hosting Infrastructure

TiBox is deployed as a static web application hosted on Cloudflare Pages global Edge CDN. When you request web pages from our site, Cloudflare edge servers log standard, anonymized HTTP protocol metadata (such as request IP address, user-agent string, and timestamp) solely for DDoS mitigation, network routing, and security integrity. These logs are governed by Cloudflare's Privacy Policy and are not linked to any user identity.

3. Cookies and Local Storage

TiBox does not use first-party tracking cookies or marketing profiling cookies. Certain tools may offer an optional "Remember Preferences" toggle that stores non-sensitive UI settings (such as dark mode or font size preferences) locally in your browser's localStorage. This data remains strictly on your device and can be cleared at any time via your browser settings.

4. Third-Party Advertising & Google AdSense

To maintain free access to our utilities without charging subscription fees, TiBox may display online advertisements served by Google AdSense or compliant programmatic networks.

Google and third-party vendors use cookies (such as the DoubleClick cookie) to serve relevant ads based on prior visits to this or other websites. You can opt out of personalized advertising by visiting Google Ad Settings or aboutads.info.

5. Regulatory Compliance (GDPR, CCPA & HIPAA)

Because TiBox does not collect, retain, or process Personal Identifiable Information (PII) on backend servers, our platform is natively compliant with the European General Data Protection Regulation (GDPR Article 32) and the California Consumer Privacy Act (CCPA).

Enterprise and healthcare professionals can utilize our client-side PDF and image sanitization tools in compliance with HIPAA confidentiality standards because documents are processed strictly in RAM and never leave the local computer.

6. Contact Information

If you have any questions, inquiries, or security audit requests regarding our Privacy Policy or client-side architecture, please contact our privacy and engineering team: