Privacy
DevNestro is a set of free utilities. This page describes what happens to data when you use the site. It is not legal advice. For questions, use Contact (hello@devnestro.com).
Accounts and stored content
DevNestro does not offer user accounts, billing profiles, or a content database. Tool input is not saved as a document, history, or workspace after your session ends, except the Online Notepad, which stores text in your browser’s LocalStorage until you clear it or site data, Smart Workflows and Workspace, which keep temporary artifact bytes and list metadata in this browser’s IndexedDB/LocalStorage until you clear them or they expire (default 24 hours for workflow artifacts), and File Share, which keeps one uploaded file on this web app’s disk for 24 hours and then deletes it. Encrypted one-time notes store only ciphertext on this web app’s disk until the note expires or is burned after reading. The encryption key stays in the link fragment and is not stored. Cloud steps inside workflows (File Share, Gemini) require an explicit action and consent UI — they do not run automatically.
What is processed while you use a tool
The site runs as a Blazor Server app. Text and files you submit on some tools are sent to the application server for that session so the page can return a result. Text tools, calculators, converters, generators, Base64, GUID, summarizer, PDF Intelligence, Private PDF Chat, and Resume Job Match follow that model. The Resume Builder keeps drafts in IndexedDB on your device when you save and does not upload resume contents by default. The QR code generator encodes in the browser, including Wi-Fi names and passwords. Image tools (compress, resize, crop, format conversion including PNG to JPG, background removal, and batch image processing) run in your browser and do not upload the file. The Online Screen Recorder captures and encodes in your browser. The recording is not uploaded unless you explicitly choose Share for 24 Hours, which uses File Share (16 GB maximum, deleted after 24 hours). The Script to Video Maker and Text to Speech tools generate speech in your browser with the same local Kokoro engine. Auto Voice and Text to Speech are generated on your device; the script or typed text is not sent to a speech service. The browser may download a voice model from a trusted host on first use. The finished video is not uploaded unless you explicitly choose Share for 24 Hours, which uses File Share (16 GB maximum, deleted after 24 hours). Audio & Video to Text (also at Video & Audio Text Extractor) transcribes speech and can read on-screen video text in your browser. Media is not uploaded to a transcription or OCR service; the browser may download a speech model or OCR language pack on first use. Frames are sampled rather than recognized one-by-one, and results are not a complete or speaker-separated transcript. OCR, Universal Data Converter, CSV / Excel Data Cleaner, CSV / Excel Chart Maker, Spreadsheet Formula Auditor, Diff Checker, JSON Formatter, Validator & Viewer, JSON to Code Generator, XML Formatter, Validator & Viewer, YAML Formatter, Validator & Viewer, Code Formatter & Beautifier, URL Toolkit, File Hash Checker, Universal File Inspector, Time Zone Meeting Planner, Color & Accessibility Checker, Secret Leak Inspector, Stack Trace Safe-Share Cleaner, Webhook Signature Playground, and Regex Safety Inspector process files and text in your browser. Uploaded spreadsheets, images, PDFs, hashes, transcripts, diff contents, JSON payloads, XML, YAML, source code, generated source, secrets, stack traces, HMAC secrets, regex samples, and related payloads are not sent to DevNestro or to analytics. The AI Usage Disclosure Generator and AI Task Specification Builder keep drafts in the page session like other text tools; they are not stored after you leave and are not used as analytics content. SEO & Social Preview Checker can preview pasted metadata in the session. URL inspection fetches public HTML through DevNestro with private-address blocking; JavaScript is not executed. Entered URLs are used only to retrieve that page. Meta Tag Generator, Schema Markup Generator, Robots.txt Generator, Robots.txt Tester, XML Sitemap Generator, Hreflang Tag Generator, and local paste/upload modes of Sitemap Validator and AI Crawler Checker run in the page session without contacting third-party sites. Redirect Checker, HTTP Header Checker, Canonical URL Checker, Sitemap Validator (URL mode), and AI Crawler Checker (fetch mode) contact the public http(s) URL you enter through DevNestro’s safe fetcher. Those requests use a clear DevNestro user agent, do not forward cookies, do not send Authorization headers, and block localhost, private, link-local, and cloud-metadata targets. Fetched content is used only to produce the on-page report and is not kept as an archive. Merge PDF, Split PDF, JPG to PDF, PDF to JPG, PDF Watermark, PDF Page Numbers, Compress PDF, Secure PDF Redactor, and the PDF Editor also run in your browser and do not upload the file unless you explicitly choose Share for 24 Hours from the PDF Editor, which uses File Share (16 GB maximum, deleted after 24 hours). PDF Protect / Password is different: the file is processed briefly on the server so real encryption can be applied, is not stored afterward, and passwords are not logged. The Online Notepad auto-saves in LocalStorage on your device and is not uploaded. The Decision Wheel keeps names in the browser while you spin. File Share uploads a file to this website’s own filesystem (not Azure Blob Storage or another cloud drive) so a recipient can download it for 24 hours. After that the file and the link are removed. If you send the link by email, the recipient address is used only to send that message and is not stored. Currency Converter sends only currency codes and requested rate ranges to the Frankfurter exchange-rate provider; no financial account data is required, and amounts stay in the page session. AI Book Marketing Video Generator keeps standard-composer drafts and WebM export in the browser (IndexedDB draft optional); Gemini script help and Veo clips send prompts to Google only when you explicitly run those cloud steps. Savings goal, profit margin, Zakat calculator, invoice generator, quote generator, and bill splitter amounts stay in the page session and are not stored. The Calendar Event Maker keeps titles and notes in the session and downloads an .ics file on this device. The Document Expiry Tracker can save names, dates, and notes in IndexedDB on your device if you choose Save; that list is not uploaded. The Emergency Card encodes optional contact fields as a QR code in your browser. Anyone who scans the saved code can read those fields. The card is not stored on DevNestro. The File Renamer reads filenames, types, dates, and sizes in your browser and packages copies into a ZIP or a folder you pick; file contents are not uploaded. The Home Inventory can save room and item lists, and optional photos, in IndexedDB on your device. That list is not an insurance valuation and is not uploaded. The Document Scanner straightens photos of paper pages in your browser and does not upload them. Extract Text uses the same local OCR engine; a language pack may download on first use. The Passport & ID Photo Maker crops and sizes a portrait in your browser. The photo is not uploaded. Profile sizes are copied from cited government pages and are not a promise of acceptance. The Receipt & Invoice Extractor reads a photo with local OCR. You review the fields before download. Amounts are not converted between currencies and are not uploaded. The Screenshot Guide Maker assembles screenshots into a guide in your browser and does not upload them. The Background Remover runs segmentation in your browser; a model may download from a CDN on first use of that tool only. Images are not uploaded to DevNestro. The Resume Builder can save drafts in IndexedDB on this device; resume contents are not uploaded. PDF and print stay local. The CSV / Excel Chart Maker parses spreadsheets and renders charts in your browser; SheetJS and Chart.js may load from a CDN when needed. The Batch Image Toolkit resizes, compresses, converts, renames, rotates, and strips metadata in your browser, then builds a ZIP locally. Secure PDF Redactor rebuilds marked pages in your browser and verifies extraction locally; PDFs are not uploaded. Social Media Safe-Area Simulator previews uploaded designs in your browser; artwork is not uploaded. Before-Publish Media QA reuses local metadata, privacy, OCR, Content Credentials, and safe-area checkers in your browser; media is not uploaded. Spreadsheet Formula Auditor parses XLSX in your browser with SheetJS when needed; workbooks are not uploaded and are not auto-fixed. The AI Prompt Privacy Checker, Privacy Redactor, Secret Leak Inspector, Stack Trace Safe-Share Cleaner, Photo Metadata Cleaner, Screenshot Privacy Redactor, Document Privacy Cleaner, Content Credentials Checker, AI Image Detector, Scam Message & Link Checker, Safe-to-Share File Inspector, and QR Safety Inspector run in your browser and do not upload prompt text, redacted text, photographs, screenshots, PDFs, media files, messages, QR images, or links. The AI Image Detector may download a detector model to your browser from Hugging Face or the host you configure; the image is not sent to that host. Encrypted one-time notes are encrypted in your browser; DevNestro stores ciphertext, an IV, and expiry metadata, not the plaintext or the fragment key. We do not use that input to train models or to build marketing profiles.
Gemini AI Tools (including Gemini AI Chat, AI Writer, AI Summarizer, AI Rewriter, AI Proofreader, AI Translator, Structured Data Extractor, AI Code Assistant, AI Document Analyzer, Gemini PDF Chat, Multi-File Comparer, Gemini File Search, Long Document Analyzer, AI Image Analyzer, AI Image Text Extractor, AI Alt Text Generator, AI Image Generator, AI Image Editor, AI Audio Analyzer, Gemini Audio Transcriber, Gemini Text to Speech, Live Voice Assistant, Live Camera Assistant, AI Video Analyzer, AI Video Summarizer, Video Q&A, YouTube Video Analyzer, AI Video Generator, AI Video Editor, AI Web Research, AI URL Analyzer, AI Local Research, AI Data Analyst, AI Math & Calculation Assistant, Semantic Text Similarity, Semantic Search, Multimodal Similarity, Function Calling Playground, Gemini Agent Playground, Remote MCP Playground, AI Batch Processor, and Long-Context / Cache Demo) send the text, images, audio, camera frames, video, YouTube URLs, public page URLs, place queries, or files you submit to Google’s Gemini Developer API for processing. Document and larger image, audio, or video tools may upload files through Gemini’s Files API and, for File Search, create a temporary File Search store. Live Voice and Live Camera use Gemini Live with a short-lived server-issued token. YouTube analysis sends the public URL only; DevNestro does not download or rip YouTube media. AI Web Research and AI Local Research use Google Search or Maps grounding on a paid host and share the Search rate limit. AI URL Analyzer sends a validated public URL to Gemini URL context; DevNestro does not fetch the page and rejects localhost, private, metadata, and non-http addresses. AI Data Analyst and AI Math & Calculation Assistant send pasted tables, optional data files, or calculation text to Gemini with code execution on Google’s side; DevNestro does not run generated Python on this host. Semantic Text Similarity, Semantic Search, and Multimodal Similarity send text (and, when the embedding model allows it, supported files) to Gemini embeddings. Rankings are computed in memory for the session and discarded. User embeddings are not written to disk and are not used for analytics of private content. Function Calling Playground sends a prompt and JSON schema to Gemini and displays requested function arguments; DevNestro does not execute user-defined functions or use reflection. Gemini Agent Playground may attach Gemini built-in tools (Search, URL context, code execution, File Search, structured output) and does not run shell commands on this host. Remote MCP Playground is disabled by default and does not let public users point DevNestro at an MCP URL. AI Batch Processor submits prompts to Gemini’s Batch API on a paid host and tracks job status in memory without a database archive. Long-Context / Cache Demo creates a temporary Gemini context cache on a paid host for repeated questions, then deletes it when you clear the page or when it expires. Those pages are cloud AI. They are not processed only in your browser. DevNestro does not keep a prompt, file, or result archive after the session. Temporary Gemini files and File Search stores are deleted when you clear the page, delete the search session, or when a cleanup job expires them. Application logs for Gemini may record the feature name, model id, duration, token counts, and success or failure—not the prompt, the files, or the model output. DevNestro AI Assistant (/assistant) may send a short task description to Gemini to extract search intent, then matches against the local tool and workflow registry. It never invents tool URLs. Chat stays in the browser session (capped message count) and is not archived by DevNestro. When no catalog match exists, DevNestro may store only a normalized feature key and UTC timestamp for anonymous demand tracking—not IP, identity, user agent, or full chat text. Milestone and daily demand emails include feature keys and counts only. If this host is configured on Gemini’s free API tier, Google’s published terms (verified against Google’s pricing and data-use pages as of September 2026) may allow submitted content to be used to improve Google products. A paid tier is described differently by Google; the tool pages follow the configured tier. DevNestro is not an official Google product. Do not submit confidential material unless you accept Google processing.
PDF translation, optional AI summaries, and optional Private PDF Chat answers send extracted text or retrieved excerpts to the OpenAI-compatible endpoint you configure (for example OpenAI or a local Ollama instance). Private PDF Chat does not send excerpts unless you opt in. DevNestro does not operate that model and does not receive an API key unless you store one in your own User Secrets or host configuration.
Logs and technical data
The host may record ordinary web logs such as time, URL, status code, IP address, and user agent. Those logs exist to run and debug the service. They are not a catalog of tool payloads.
DevNestro may use anonymous page-level activity to highlight recently used tools on the home page. That activity stores only a UTC timestamp and a tool identifier. It does not identify individual visitors, and it does not store IP addresses, query strings, file contents, or form values. Missing-feature demand tracking (from the AI Assistant) stores only a UTC timestamp and a normalized feature key in local JSONL files plus an aggregate demand index. It does not store chat transcripts.
Cookies and similar storage
Essential cookies or similar storage keep the interactive session and anti-forgery protection working. The Online Notepad may use LocalStorage on your device. These are needed for the site to function and are not used to build an advertising profile by DevNestro.
Advertising and Google
This site may display Google ads (including Google AdSense) on public pages. When ads are shown, third parties, including Google, may place and read cookies on your browser, or use web beacons, pixel tags, or IP addresses to collect information as a result of ad serving on this website. Google’s use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings. Google describes how it uses data from partner sites and apps at How Google uses information from sites or apps that use our services.
We do not place ads on File Share download links (/share/…) or Secure Note reading
pages (/n/…). Those pages are private transfers, not publisher articles.
Fonts
Pages load the Inter font from Google Fonts. Your browser may contact Google to fetch that file. Google’s handling of that request is covered by Google’s own policies.
Children
The site is for a general audience of students, developers, and working adults. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will delete what we can identify.
Changes
If this policy changes, the date at the top of the page will change. Continued use of the site after an update means you are using the service under the revised policy.