Privacy Policy

Information We Collect

We follow a principle of minimal data collection. Here is exactly what we collect and why:

• •Account information: If you choose to create an account, we collect your email address and display name through Firebase Authentication. This is used solely for login and identifying your saved preferences.
• •Favorites and dashboards: When signed in, your favorite tools and dashboard configurations are stored in Firebase Firestore so you can access them from any device.
• •Local preferences: Language, theme, and currency preferences are stored in your browser's localStorage. This data never leaves your device and is not transmitted to any server.
• •Tool data: Local tools keep input in your browser. Clearly labelled AI, cloud, server, and upload workflows transmit the selected text, image, audio, document, or URL to our service and the provider needed to complete the request.
• •Service and abuse-prevention data: We may process a pseudonymous IP hash, account ID, requested feature, model/provider, token counts, request timing, status, and error code for rate limits, security, reliability, and cost control.
• •Contact data: If you contact us, we store the name, email address, subject, message, time, and a pseudonymous network identifier needed to respond and prevent abuse.

Cookies and Tracking

We use a limited number of cookies, each serving a specific purpose:

• •Authentication cookies: Firebase sets session cookies when you sign in to maintain your login state securely.
• •Advertising: Third-party vendors, including Google, may place and read cookies or use web beacons, IP addresses, and other identifiers to serve, measure, and—where consent permits—personalize ads.
• •Analytics: Google Analytics may process page activity, device and browser information, network information, and approximate location. Where required, choices are collected through our Google-certified consent flow.

Third-Party Services

We use service providers that may process cookies, web beacons, IP addresses, device or browser information, account details, and tool input according to their own terms and privacy policies:

• •Firebase (Google): Provides authentication and cloud database services. Your email and preferences are stored on Google Cloud infrastructure under Google's privacy commitments.
• •Google AdSense and advertising partners: Serve and measure ads and may use cookies or other identifiers based on visits to this and other sites. Personalized advertising is used only where permitted.
• •Google Analytics: Measures site activity and technical performance subject to the consent choices available in your region.
• •AI and cloud providers, including Google, OpenAI, Anthropic, and Vercel Blob when configured: Clearly labelled tools may send text, images, audio, documents, or URLs to the provider required to perform the requested operation. Temporary uploads are deleted after processing where the workflow supports it, although provider-side handling remains subject to that provider's terms.

Data Security

We minimize transmitted data and use HTTPS. Local tools keep input in the browser; cloud tools necessarily transmit their input. Account preferences, operational records, and contact submissions may be stored in Firebase, while selected media workflows may use temporary Vercel Blob uploads. No internet service can guarantee absolute security.

Your Rights

You have full control over your data:

• •Access: You can view all personal data associated with your account from the Dashboard page.
• •Deletion and correction: Contact us to request deletion or correction of personal data associated with your account or a contact submission. We may need to verify your identity and retain records where legally required.
• •Advertising and cookie choices: Use the privacy controls below and Google's Ads Settings to review or withdraw available consent choices.
• •No account required: The vast majority of our tools work without signing in. Creating an account is entirely optional.

Children's Privacy

Free2Box is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Changes to This Policy

We may revise this Privacy Policy as our services evolve. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us through our Contact page.