YOUR DATA, YOUR CHOICE

Small tools.
Clear privacy choices.

All 50 tools process their inputs on your device. Cloud saving is optional and only happens when you choose it.

Using tools without an account

Your working inputs and results stay in the current page. Download anything you want to keep before closing or refreshing it. No tool input is automatically uploaded. Copying, printing and opening a decoded link use your device or the destination you choose.

Signing in and saving work

We use Supabase for accounts, database storage and private file storage. Google sign-in shares your basic profile and email address with Supabase; email codes are delivered through Resend. Session cookies are required to keep you signed in. We do not collect your Google password or access your Gmail, Drive, contacts or calendar.

Choosing Save uploads the tool’s supported inputs and settings. Passwords, hash inputs, encoded text, QR contents and Wi-Fi credentials are excluded from saved work. File tools save settings; saving a file requires explicitly choosing it in the cloud upload control. Avoid saving sensitive information in titles, free text or files.

Each Free account has 20 saved items, 1 MiB of structured work (100 KiB per item), and 5 MB total file storage across all tools. Uploaded files are private and downloaded through authenticated ownership checks. We retain saved work until you delete it or delete your account. Unfinished uploads become eligible for cleanup after one hour. Backlogs or provider outages can delay removal.

Activity and analytics

With your optional consent, we collect page views, browser-session counts, tool opens, starts, completions, errors, exports, cloud saves and quota events. These events contain tool identifiers and random session identifiers, and may link to your account while signed in. They never contain tool inputs, file contents, filenames, saved titles, full URLs, raw IP addresses or error messages. Raw events are kept for up to 8 days and daily aggregates for up to 366 days. You can change your choice using Privacy choices.

Account activity, usage counters and resource limits are necessary to operate the service. Cloudflare, Supabase, Google, Resend and the Turnstile security check may process routine request and security metadata under their own policies. Cloudflare hosts the website and handles requests; the consumer Supabase project stores data in the US. There are no advertising scripts in this release.

Panels labelled “Advertisements” currently show FlowPilot’s own promotions. They use local images and ordinary links, without an advertising network or ad-tracking cookies. They do not read your tool inputs or saved work.

Exporting and deleting

My workspace lets you export saved work as JSON, download files, delete individual items and permanently delete your account. Deletion removes your saved data and account-linked raw analytics; already aggregated anonymous statistics remain. Provider logs and backups follow each provider’s retention policies. There is no guaranteed recovery after deletion, so export anything you need first.

Shared devices

Sign out when finished. Google sign-in may temporarily preserve supported draft fields in this browser tab for 30 minutes so you can resume your work. Browser extensions, the clipboard, device management and downloaded files are outside this website’s control.

Contact

Privacy questions: hello@getflowpilotai.com. The consultancy’s contact form sends the information you enter so we can respond.

Updated October 27, 2026.