Privacy Policy

Last updated: October 15, 2026

Welcome to Pocketool (pocketool.app, referred to below as "this site"). This policy explains how this site and its tools, whether they are hosted on a subdomain at *.pocketool.app or under a path at www.pocketool.app/<tool>/, collect, use and protect your information. Please take a moment to read it. This policy describes what this site actually does: the analytics and advertising scripts run as soon as a page loads, and this site has no cookie consent manager of its own. The exception is visitors in the European Economic Area, the UK and Switzerland: on pages that load the ad script, Google's cookie consent dialog is shown according to the Google AdSense "Privacy & messaging" settings (see section 4). Sections 4 and 5 explain how to opt out of personalised advertising or stop being counted by Google Analytics.

Scope

This policy covers this site and all of its tools, but Google AdSense in section 4 and Google Analytics (GA4) in section 5, together with the cookies they use, apply only to pages on www.pocketool.app: the home page, articles and guides of this site, and the tools that live under a path (such as www.pocketool.app/kaomoji/). The pages that show ads share this site's single AdSense account. For traffic statistics, the tools under a path share this site's single Google Analytics property. Device Tester's measurement ID is supplied by the deployment environment, and with none set it loads no Google Analytics at all. Not every page shows ads or runs Google Analytics; sections 4 and 5 say which do. Cloudflare Web Analytics in section 6 is different: it runs on every page of this site and its tools, including the three subdomains below, except the problem report page described next.

The tools under a path are currently Pocket Word King, English Shadowing, Emoji and Kaomoji (Kaomoji Garden), the Office Life Calculator (formerly Calc Lab), QR Code Maker (formerly QR Code Studio), the Taiwan ZIP Code Lookup, Pixel Smith Image Tools and Device Tester, plus this site's own Word and Character Counter, Chinese Number Converter and Simplified and Traditional Chinese Converter. Device Tester, English Shadowing and Pocket Word King have no privacy page of their own and rely on this policy directly. QR Code Maker, Pixel Smith, the Office Life Calculator, the Taiwan ZIP Code Lookup and Kaomoji Garden each have their own privacy page adding their own detail, and treat this policy as the parent document; where they conflict, this policy prevails.

This site also has a problem report page (www.pocketool.app/feedback/en/, with a Chinese version at /feedback/), opened by the "Report a problem" link at the bottom of each site, for telling the owner about a problem. It is covered by this policy too, as described in "Problem reports" in section 1. That page shows no ads and loads neither Google Analytics nor Cloudflare Web Analytics.

The three tools on subdomains are separate sites. None of them shows Google AdSense ads, and each handles its own Google Analytics:

• Spinning Top Arena (beyblade.pocketool.app) loads its own Google Analytics to count visits. The data and privacy section on its home page explains this, in Chinese.
• Speak Cards English Practice (speak-cards.pocketool.app) shows no ads and uses no Google Analytics. See its own privacy policy, which is in Chinese.
• Taiwan Life Calculator (tw-life-calc.pocketool.app) loads its own Google Analytics (GA4) to count page views. See its own privacy notice, which is in Chinese.

Page views on these three tools are also counted by Cloudflare Web Analytics, as on this site (see section 6). Their own privacy notices do not mention it yet; on that point this policy prevails. What these three tools store when you sign in is described in section 1.

1. Information we collect

Most tools on this site run entirely in your browser: what you enter into them, such as amounts, addresses, the content of a QR code, or the images and files you want to work on, is not uploaded to this site's servers or stored there. Picking an image or a file is not the same as uploading it either. The logo and scanned images in QR Code Maker, and in Pixel Smith the ID photos, the signature or logo images, the HEIC files, the images you convert, the photos you blur, pixelate or add text to, the photos you open in the Photo Editor, and what you record with the Screen recorder, are all read and processed inside your browser. This site's Simplified and Traditional Chinese Converter works the same way: the text you paste and the subtitle or text files you pick are converted in your browser and never uploaded, and the converted files are created in your browser too. The first time you use it, it downloads its conversion dictionary from this site, and that request does not contain your text. There are three exceptions. One is the cloud save in the Pixel Smith Photo Editor: when you sign in with Google and press "Save here", that editing project is uploaded, as described in "Pixel Smith Photo Editor cloud save" below. The other is Pocket Word King: once you sign in, your learning progress, your settings and your answers in the mock tests (TOEIC, IELTS and TOEFL question types) are stored on the server, as described in "Pocket Word King" below. The third is problem reports: when you sign in and press send, what you wrote and the screenshots you chose are uploaded, as described in "Problem reports" below.

Two cases do put what you entered into the URL, and the URL is sent to Google Analytics with the page view and is readable by the ad script on the same page, so it is worth knowing about:

• Office Life Calculator: eight of its pages (compound interest on the home page, regular investment, FIRE, retirement withdrawal, goal back-calculation, mortgage, the Qing-An loan and the floor area converter) write the figures you type into the query string, so you can copy or bookmark that particular calculation. The labour pension and annual leave pages write only assumption-type parameters (such as the contribution rate, the return rate, inflation and the scheme), and deliberately neither write nor read back your salary, age, tax rate, account balance or start date. The overtime pay, severance pay and annualised return pages write nothing to the URL at all.
• Taiwan ZIP Code Lookup: what you type into the page is never written to the URL. However, if the URL you open already carries ?q=<address> (a link someone sent you, for example), the full URL of that one request reaches the server as usual. Once the page has loaded, a script in your browser strips q from the URL before Google Analytics loads.

In addition, search terms in Kaomoji Garden, and the search and category filters in this site's tool directory, are also written to the query string.

The information we may collect includes:

• Usage analytics: statistics collected through Google Analytics (GA4), such as the URL visited (including the query string described above), time on page, device and browser type and approximate region, used to understand how the site is used and to improve it. Some tools also send custom events; section 5 has the detail. Page views and load times on every page are also counted by Cloudflare Web Analytics; see section 6.
• Cookies and similar technologies: used for traffic analysis, for serving ads, and to keep you signed in to the tools that have accounts, as described in section 3.
• Additional information in tools with a sign in: most tools need no account. The seven tools below let you sign in with Google. Spinning Top Arena is the only one you must sign in to use; the other six work without an account (in Pixel Smith, only the Photo Editor's cloud save needs one; Pocket Word King can be played without one, but it saves your learning progress and settings only once you sign in, and its mock tests (TOEIC, IELTS and TOEFL question types) always need one). The "Report a problem" link at the bottom of each site also needs a Google sign in before a report can be sent; see "Problem reports". What each tool stores is set out in the subsections below. What Google account data this site receives when you sign in with Google, and how to revoke it, is in "What this site gets when you sign in with Google"; how to access, correct and delete your data is in "Accessing, correcting and deleting account data".

English Shadowing

It lives at www.pocketool.app/english-shadowing/. Signing in syncs your practice records across devices. It collects and stores:

• Identity from Google sign in: once you have signed in with Google, when your practice records sync, the site takes your Google account identifier (used as your unique key), your email address, your display name and your profile picture URL from the credential Google issues, and records when the account was created and when it was last used. The email, name and picture are only a snapshot of your Google account details and are refreshed on later syncs (at most once an hour). The site does not ask Google for your contacts, your Drive or any other additional scope.
• Learning progress: once you are signed in, your practice records are synced to a copy on the server. That copy holds your progress for each video (which sentences you played and shadowed, where you left off, your bookmarks and any notes you typed), the words you saved, the videos you practised recently (video id and title), how many sentences you practised each day and your streak, and your sentence drill sessions, missed items and running totals, plus a randomly generated device code that carries no identity. It is keyed to your account identifier and capped at 256 KB. Nothing is synced unless you are signed in: without an account, the records stay in this browser only.
• Adding a video creates a public page: anyone, signed in or not, can paste a YouTube link, and the site then fetches that video's basic details and English captions, sends them to Cloudflare Workers AI to generate a Chinese summary, topics and outline, stores the result in this site's database, and creates a public video page. Whether a video is kept, and whether search engines may index it, are decided automatically by code, with no human review and no allowlist. You cannot remove that page yourself; ask as described on the contact page. What goes to the AI is YouTube's video details and captions, not anything you typed. The notes and vocabulary you sync after signing in are not shown publicly.
• Signing out and deletion: signing out ends syncing on that device. It does not delete the copy on the server. This tool has no self-service deletion, so to delete your account and your synced progress, let us know as described on the contact page.
• IP addresses: your raw IP address is not stored. Adding a new video is capped per day, counted per IP address, and that counter is keyed on a SHA-256 hash of your IP address combined with the current date, so the value differs every day for the same address. The hash uses no secret key, though, and because the number of IPv4 addresses is limited, the original address could technically be recovered by hashing every possible address and comparing. The value is therefore pseudonymous rather than anonymous; this site does not use it that way. Counter rows older than two days are deleted the next time anyone adds a new video. Abuse protection passes your IP address to Cloudflare's rate limiting service for comparison, and the site does not write it to its own database.
• Server execution logs: the server behind this tool (a Cloudflare Worker) has the platform's execution logs turned on so errors can be traced. Those logs include basic request information such as the time, the URL and the response status. Cloudflare clears them automatically at the end of its retention period. The site does not use them to analyse individual behaviour and does not join them to the account data above.

Emoji and Kaomoji (Kaomoji Garden)

It lives at www.pocketool.app/kaomoji/. You only need to sign in to submit, comment on, report or sync Emoji combos. It stores only your Google account identifier and your nickname (assigned at random the first time you sign in, and yours to change afterwards), never your email address, your name or your photo (your email address is used once at sign in to check whether you are an administrator, then discarded). A cookie that lasts 30 days keeps you signed in, and the server stores only a hash of that token.

• Submissions and comments are published without prior human review. They can be copied and commented on, they get a public URL of their own, and they may be indexed by search engines. A comment that matches a blocked word is held for a moderator first. Any signed-in user can report content, and three upheld reports on the same item hide it automatically.
• Your nickname is shown publicly next to every submission and comment. The reason you give in a report is not shown publicly.
• One thing happens even without signing in: after you copy an Emoji combo, your browser reports the public ids of those combos back to this site, up to 20 at a time, so popular combos can be counted. The server reads your IP address on arrival and turns it into a hash, using a key generated randomly for that day, to use as a deduplication key. The key and those deduplication rows are deleted after two days, and once they are gone the IP address cannot be recovered. What is reported is the id of a combo, not your identity.
• Submitting also uses a hash of your IP address: when you submit an Emoji combo after signing in, the server likewise hashes your IP address with a key generated randomly for that day, to cap how many submissions come from one IP address (for IPv6, one /64 network) in a day (at most five submissions a day, counting ones refused as duplicates or over the account limit; each account is also limited to five a day). Your raw IP address is still not stored, the key and those rows are deleted after two days, and once they are gone the address cannot be recovered. Comments do not do this.
• Its own privacy page has the detail: English, Traditional Chinese.

Pixel Smith Photo Editor cloud save

It lives at www.pocketool.app/pixel-smith/photo-editor/. None of the Pixel Smith tools needs an account; only the Photo Editor's cloud save asks you to sign in with Google, so you can store an editing project and carry on from another device. If you never sign in, the feature is simply not used: opening the page, picking a photo, editing and downloading send no requests to it.

• When something is uploaded: only when you have signed in and press "Save here" under Cloud projects is that editing project uploaded. Nothing is uploaded automatically.
• What is stored: the pixels of the photo and of each layer, masks, text and shapes, adjustment settings, your last few undo steps (up to 20), a small thumbnail (a JPEG 320 pixels on its long side) and the project name you choose. The original photo's capture data (EXIF) and file name are not stored.
• Account: only your Google account identifier is stored, along with when the account was created and last used. Your email address, name and profile picture are not stored.
• Where it is kept: a Cloudflare D1 database (accounts, hashes of sign-in sessions and the list of projects) and Cloudflare R2 storage (project contents). The storage is not public, has no sharing links and no address of its own, and your projects can only be read through this site after your identity is checked.
• Limits: up to 3 projects per account, up to 50 MB each.
• Staying signed in: a cookie that lasts 30 days keeps you signed in, and the server stores only a hash of that token (see section 3). Signing out only ends the session and does not delete your projects.
• Deletion: under Cloud projects you can delete a single project, or press "Delete account and all cloud projects" to remove your account, every project and your sessions straight away. Section 8 says when unused accounts are deleted automatically.
• Its own privacy notice has the detail: English, Traditional Chinese.

Pocket Word King

It lives at www.pocketool.app/vocab/. You can play every game without signing in, but your progress stays only in that tab and is gone when you close or reload it, and the settings cannot be changed. Once you sign in with Google, your learning progress and settings are kept on the server, so you can carry on from another device. The mock tests (TOEIC, IELTS and TOEFL question types, /vocab/zh-tw/mock/) always need you to sign in before you can start a test, though their introduction page can be read without signing in: the timer and the number of times each recording has been played are kept by the server (reloading the page or switching devices does not reset them), and the answers and explanations are released only after you submit. Progress made before you sign in is not carried into your account. While you are signed out, Pocket Word King's pages send no requests to these features.

• What the learning record holds: every action in Pocket Word King that changes your progress is one entry:

  • each answer: which word or phrase, which kind of question, whether it was right, how long you took, how many hints you used, which option you chose (for spelling questions, the letters you typed) and the XP you earned;
  • a summary of each round (game, start and end time, number of questions, number correct, grade), and each word card's memory state and next review date;
  • daily quests, chests, items, streak freezes and repairs, achievements, stories read, areas visited and outfits;
  • settings (daily limits, starting level, level labels, accent, phonetic notation, audio, spelling, text size, reduced motion and sound effects).

  Each entry also carries a time, the game day and a device number your browser makes up at random (to tell which device uploaded it; it contains nothing about the device). Your IP address is not recorded.

• What the test record holds: a record of each mock test you take (TOEIC, IELTS or TOEFL question types): which test and its version, when each section (listening, reading) started and its deadline, when you submitted, the answers you chose or typed (up to 40 characters per blank in fill-in questions), how many times each recording was played, the question numbers you flagged, and, once you submit, the estimated score and the number correct in each part or question type (for the IELTS and TOEFL question types, also whether each question was right or wrong). It also records whether the test was submitted automatically when time ran out and whether it was submitted late. In the TOEFL question types the listening section only moves forward, so the record also notes up to which question you can no longer go back. Test records do not include how long you spent on each question.

• Account: only your Google account identifier is stored, along with when the account was created and last used. Your email address, name and profile picture are not stored.

• Where it is kept: a Cloudflare D1 database. Learning and test records have no sharing links and are not public, and your records can only be read through this site after your identity is checked. A signed-in browser also keeps a copy of your learning record (in the browser's IndexedDB) so you can play offline and upload once you are back online; that copy is deleted when you sign out or delete your account.

• Staying signed in: a cookie that lasts 30 days keeps you signed in, and the server stores only a hash of that token (see section 3). Signing out only ends the session and does not delete your learning or test records.

• Deletion: once signed in, you can press "重設" (reset) in Settings to clear your learning record (on every device; test records are kept), or "刪除帳號" (delete account) to remove your account, learning record, every test record and your sessions straight away (the mock test's introduction page has the same "刪除帳號" button). An account unused for 180 days is also deleted automatically. Section 8 has the detail.

• Rate limits: to prevent abuse, signing in is limited per IP address, and requests such as uploading or downloading your learning record and answering tests are limited per account. Cloudflare's rate limiting service makes the comparison, and this site does not write your IP address to its database.

Spinning Top Arena

It lives at beyblade.pocketool.app. The whole game requires a Google sign in. A cookie that lasts 30 days keeps you signed in and is cleared when you sign out. In a match your opponent sees your nickname and your Google profile picture, but not your email address or your Google account name. It stores:

• Your Google account identifier, email address, name and profile picture URL (refreshed on each sign in), and when the account was created and when you last signed in.
• A nickname the system assigns you. It is picked from the game's own list of names, not taken from your Google account, and you can change it in your settings.
• Your settings, such as your line-up, launch mode, replay speed and sound on or off.
• Your record of matches against people: the room code, both nicknames, the score, the winner and when the match ended. Practice matches against the bot are not recorded.

Speak Cards English Practice

It lives at speak-cards.pocketool.app. The lessons can be read without an account. Signing in is optional and is used only to recognise your account and remember which lessons you marked as practised, and your voice conversation with the AI happens inside ChatGPT or another AI service, not on this site. See its own privacy policy, which is in Chinese. Once you sign in it stores:

• The name, email address and profile picture URL from your Google account, and whether Google has verified that email address.
• Your Google account identifier, plus the tokens Google issues at sign in and the scope granted, which covers only basic profile data (openid, email and profile).
• A record of each sign-in session: a session token, its expiry time, and the IP address and browser details (user agent) you signed in from.
• The lessons you marked as practised and when you marked them. Removing the mark deletes that record.

Taiwan Life Calculator

It lives at tw-life-calc.pocketool.app. Signing in is optional. It stores only the anonymous identifier Google provides, and your email address only as a one-way hash. Calculations you choose to save (the figures you entered, the results, and groupings such as gender, age band and region) are stored on the server, and you can delete them yourself once signed in. See its own privacy notice, which is in Chinese.

Problem reports

The page is at www.pocketool.app/feedback/en/ (the Chinese version is at /feedback/). The "Report a problem" link at the bottom of each site opens it, so you can tell the owner which site has a problem. Opening the page and filling in the form send nothing you write; it leaves your browser only when you sign in with Google and press "Confirm and send". When the page loads it asks the server once whether reporting is open, and that request carries none of your data.

• What is stored: the site and problem type you choose, your description and any later follow-ups, up to 3 screenshots, and, if you tick them, the path of the page (only the path, without the query string after ? or the fragment after #) and your device details (device type, operating system and its major version, browser and its major version, whether you are in the LINE, Facebook or Instagram in-app browser, and screen width), plus the interface language, the site version and the times. The full browser identification string (user agent) is not stored.
• Screenshots: they are shrunk and converted to JPEG on your device first, and the location, time taken and file name are removed in your browser; the server cleans them again on arrival and keeps only the picture itself. A screenshot may show a list of names, an address or an ID card, so check it before you send.
• Account: only the Google account identifier is stored, plus when the account was created and last used. Your email address, name and profile picture are not stored.
• Signed-in state: the credential you get after signing in is kept only in this tab's memory and expires after 2 hours. This site sets no cookie and writes nothing to localStorage or sessionStorage, so reloading or closing the tab means signing in again. Google's sign-in script loads only when you press a sign-in button, and once loaded Google may set its own g_state cookie (see section 6).
• Who can see it: reports and conversations are not public; only you and the owner can see them. The owner's replies appear under My reports, and you are not notified by email.
• AI help: the owner uses AI tools such as Anthropic's Claude and OpenAI's Codex to help sort reports. They can see your description, follow-ups, screenshots and device details, and may, on the owner's instruction, change a report's status, write internal notes, draft replies, delete reports or block accounts. A reply drafted by AI is sent only after the owner approves it, and My reports labels it as drafted by an AI assistant and sent by the owner. Content handed to the AI tools is sent to those two companies' services in the United States. The work logs of the AI tools on the owner's computer also keep what they handled (Claude Code's logs are deleted automatically after 30 days), and screenshots downloaded for viewing are deleted within 24 hours.
• GitHub issues: when code needs changing, the owner opens an issue in a private GitHub repository containing only a rewritten summary with the site, problem type and environment, never the report number, your original words or your screenshots.
• Abuse prevention: each account can send at most 3 reports and 5 follow-ups a day. Each network (a whole IPv4 address, and an IPv6 /64 and /48) also has a daily limit, counted with a hash computed using a key generated at random each day, so the raw IP address is not stored; the keys and counts are deleted after two days. Rate limits on sign in compare IP addresses through Cloudflare's rate limiting service and are not written to the database. When an account is blocked, the site keeps a hash derived from the account identifier to stop the same account signing in again, and deletes it after a year.
• Where it is stored: Cloudflare's D1 database (text and records) and R2 storage (screenshots). The storage is not public and has no sharing links; it can be read only through this site after your identity is verified.
• Deletion: under My reports you can delete a single report, or your account and all your reports, with immediate effect. Section 8 says how long each kind of data is kept.

What this site gets when you sign in with Google

This subsection covers the four tools under a path that offer Google sign in, Kaomoji Garden, English Shadowing, the Pixel Smith Photo Editor and Pocket Word King, and the problem report page. What the three subdomain tools each receive from Google is set out in their own subsections above and in their own privacy notices.

• Scopes: all five use only the "Sign in with Google" feature of Google Identity Services, in which Google issues an identity credential (an ID token) to this site. The code requests no additional scope, so only the basic sign-in scopes openid, email and profile apply: your account identifier, your email address and whether it is verified, your name and your profile picture URL. This site receives no access token that could call Google APIs on your behalf. It cannot read your Gmail, Drive, contacts or calendar, and cannot do anything in Google on your behalf.
• What each field is used for:
  • English Shadowing: the account identifier is the key for your synced data. Your email address, name and profile picture URL are stored in the database and are also used to show, in the header and the account panel, which account you are signed in with (the picture is loaded straight from Google's image servers). Every sync carries a credential issued by Google, and this site's server verifies it before reading or writing your data.
  • Kaomoji Garden: only the account identifier is stored, to recognise your account. Your email address is used only at the moment you sign in, and only when Google marks it as verified, to check whether you are an administrator, and is then discarded. Your name and picture are in the credential, but this site neither reads nor stores them.
  • Pixel Smith Photo Editor: only the account identifier is stored, to tell which cloud projects are yours. After verifying the credential, the server takes only the account identifier and checks a one-time value (a nonce) the page generated before sign in, to confirm the credential was issued for the Photo Editor. Your email address, name and picture are in the credential, but they are not read, not stored and not written to any log.
  • Pocket Word King: only the account identifier is stored, to tell which learning and test records are yours. As with the Pixel Smith Photo Editor, after verifying the credential the server takes only the account identifier and checks a one-time value (a nonce) the page generated before sign in, to confirm the credential was issued for Pocket Word King. Your email address, name and picture are in the credential, but they are not read, not stored and not written to any log.
  • Problem reports: only the account identifier is stored, to tell which reports and conversations are yours. After verifying the credential the server takes only the account identifier and checks a one-time value (a nonce) the page generated before sign in, to confirm the credential was issued for the problem report page. Your email address, name and picture are not read, not stored and not written to any log.
• Storage, sharing and protection: this Google account data is kept only in the Cloudflare database (D1) this site uses, is used only for the purposes above, is not used for advertising, is not sold, and is not given to any third party other than Cloudflare. When problem reports are handed to AI tools for sorting, they carry only an alias this site assigns (such as u_123), never the Google account identifier. English Shadowing keeps its sign-in credential only in the browser's memory and never writes it to browser storage. The Pixel Smith Photo Editor and Pocket Word King hand the credential to the server only once, at sign in, and use this site's own sign-in cookie after that; the problem report page also hands it over only once, and then uses a credential kept only in the tab's memory that expires after 2 hours. Section 9 covers how the database is protected and its limits, section 8 how long data is kept, and the next subsection how to delete it.
• How to revoke access: go to the "Third-party apps & services" page of your Google Account (myaccount.google.com/connections), find the tool from this site, and stop using "Sign in with Google" for it. You do not need to tell us. The app name shown there is whatever that Google page displays. Kaomoji Garden, English Shadowing and the Pixel Smith Photo Editor since September 2026, and Pocket Word King and the problem report page since October 2026, all share one Google sign-in setup, so revoking that entry affects all five at once; if you signed in to Kaomoji Garden or English Shadowing before September 2026, you may also see an older entry, which you can revoke as well.
• What happens after you revoke:
  • Google no longer lets that tool sign you in automatically with your account, and you will be asked to consent again the next time you sign in.
  • Revoking does not delete data this site has already stored, and this site is not notified of it. To delete that data, follow the next subsection.
  • English Shadowing needs a freshly issued Google credential for every sync. After you revoke, once the credential in hand expires (within an hour at most) or you reload the page, no new credential can be obtained, so syncing stops until you sign in again.
  • The problem report page's credential lives only in the tab's memory, so it stops working when you close the tab or after 2 hours, and you then have to sign in again.
  • Kaomoji Garden, the Pixel Smith Photo Editor and Pocket Word King keep an already signed-in browser signed in with this site's own sign-in cookie. Revoking in Google does not invalidate it, so the sign in lasts until the 30 day cookie expires; to end it straight away, sign out on the site (in Pixel Smith, under Cloud projects; in Pocket Word King, in Settings or on the mock test's introduction page).

Accessing, correcting and deleting account data

• Access or a copy: in Kaomoji Garden, once signed in, "My account" shows your nickname and your submissions, and in the Pixel Smith Photo Editor, once signed in, Cloud projects lists the projects you saved, which you can open and download; in Pocket Word King, once signed in, "匯出" (export) in Settings downloads your whole learning record, and the mock tests' introduction page shows the scores of your last 20 tests, which you can open to see your answers if you submitted them; on the problem report page, once signed in, My reports shows the reports you sent, the owner's replies and their status. To find out what this site's servers hold about you, or to get a copy, send a private message or an email as described on the contact page.
• Correction: in Kaomoji Garden you can change your nickname yourself from "My account" after signing in. In English Shadowing, your email address, name and picture come from your Google Account; once you change them there, they are updated on your next sync. For anything else that needs correcting, ask as described on the contact page.
• Deletion: in Kaomoji Garden you can delete your account yourself from "My account" after signing in, in the Pixel Smith Photo Editor you can delete one project or your account and all cloud projects under Cloud projects, in Pocket Word King you can press "重設" (reset) in Settings to clear only your learning record, or "刪除帳號" (delete account) to delete your account, your whole learning record and every test record (also possible on the mock test's introduction page; an account unused for 180 days is also deleted automatically), in Taiwan Life Calculator you can delete saved calculations from your records page, and on the problem report page you can delete a single report, or your account and all your reports, under My reports. English Shadowing, Spinning Top Arena and Speak Cards English Practice have no self-service deletion: tell us as described on the contact page and we will delete your account data. Every other tool has no account and holds nothing of yours on a server, so there is nothing to delete.
• What deleting a Kaomoji Garden account does not do:
  • It deletes your sessions, favourites, comments, reports and the account row itself, but it does not delete the Emoji combos you submitted.
  • Combos that have made the site's listings stay public, with only the author field and the title and description you wrote at submission cleared; those that have not made the listings are hidden. A combo makes the listings in one of two ways: it has been copied on two different days (by anyone), or this site has given it a theme and English and Chinese titles. So even if this site never gave it a title, a combo copied on two different days stays public after you delete your account, just without your nickname or the title and description you wrote.
  • If your account was suspended for a breach, deleting it leaves behind a one-way hash derived from your Google account identifier, used to stop the same account registering again; no retention period has been set for that record.
  • Comments can be deleted one by one, by you or by a moderator.

2. Device permissions: microphone, camera, screen sharing and clipboard

• Which pages ask: these tools currently ask for microphone, camera or screen sharing access.
  • English Shadowing (www.pocketool.app/english-shadowing/) asks for the microphone in two places: the speaking questions in sentence practice (/drill), and the shadowing recorder on a video page. The points below, from "what it is for" to "what still works if you decline", are about English Shadowing.
  • Device Tester (www.pocketool.app/device-tester/) asks for the microphone on its microphone test and for the camera on its webcam test, in both its English and Chinese pages. See "Device Tester's microphone and webcam tests" later in this section.
  • The Pixel Smith Screen recorder (www.pocketool.app/pixel-smith/screen-recorder/, in English and Chinese) asks only after you press Start: for screen sharing when you record the screen, for the microphone when you tick it or choose microphone only, and for the camera when you turn on the webcam bubble or choose camera only, with the reason explained above the button. What you record stays in that tab's memory: it is not uploaded, not written to browser storage and not sent to Google Analytics, and it becomes your own file only when you download it. Stopping, cancelling, a failed recording or leaving the page turns the microphone, camera and screen sharing off.
• When you are asked: the permission prompt appears only after you press "start practice" or the shadowing record button. Both places explain what the microphone is for before you are asked, and the sentence practice setup page deliberately never touches the microphone at all, so you can read first and then decide.
• What it is for: comparing the sentence you said against the target sentence to work out how many words matched, and, while shadowing, drawing your rhythm (when you started speaking, how often you paused, how long you spoke). This is a comparison of words and timing, not pronunciation scoring. The site gives no pronunciation score and passes no judgement on your accent.
• The recording is never uploaded to this site: only one recording is kept at a time, and the previous one is discarded as soon as you move to the next sentence. That recording is just a temporary object in your browser's memory. It is not uploaded, not written to localStorage, not sent to Google Analytics and not processed on any server, and it is gone as soon as you reload the page. The waveform and timing analysis also runs entirely in your browser. (Turning what you said into text is the one exception, covered in the next point.)
• One exception, speech to text: turning what you said into text uses the speech recognition built into your browser (the Web Speech API), which the browser performs itself. In some browsers, Chrome among them, that feature works by the browser sending the audio to its own recognition service. That leg does not pass through this site and is outside its control, and your browser vendor's privacy policy applies to it. All this site receives is the text that comes back.
• Speech synthesis, reading a sentence aloud: sentence practice in English Shadowing reads the question aloud first, using the speech synthesis built into your browser. If the voice you picked is an online one, the text being read is sent by your browser to the voice provider, whose policy applies to that leg. What is read aloud is an example sentence from the question bank, not anything you typed, and you can switch to a voice that runs on your device.
• How to revoke access: click the icon at the left of your browser's address bar (a lock or a slider), set the microphone or camera to "block", or clear this site's permission settings. You do not need to tell us. Note that permission is granted per origin: allowing the microphone or camera in any one tool under www.pocketool.app counts as granting it to every tool under that domain (for example, after you allow the microphone in Device Tester, English Shadowing will not ask again), and revoking it takes it away from all of them at once. Granting it to a single tool is not technically possible today, so revoke it when you do not need it.
• What still works if you decline: declining the microphone does not lock you out. The word order and cloze questions in sentence practice still work, as do the word order quiz, the spelling quiz and sentence by sentence playback on a video page. Only the speaking questions and the shadowing recorder are unavailable. The setup page switches off the question types it cannot run, so you will not get stuck part way through.
• Device Tester's microphone and webcam tests (from 10 October 2026):
  • When you are asked: opening the page never touches the microphone or camera and does not read your list of devices. Permission is requested only after you press Start, and the reason is explained above the button; the devices you can switch between are listed only after you allow access.
  • What it is for: the microphone test shows your live input level and can record up to 10 seconds to play back on your device; the webcam test shows the live picture, the resolution and frame rate your browser actually gets, and can take one snapshot to check the image. Neither test does speech recognition (the Web Speech API is not used), and neither analyses your voice or face.
  • Recordings and snapshots stay in your browser: they are only temporary objects in the browser's memory. They are not uploaded, not written to localStorage or IndexedDB and not sent to Google Analytics, and they are gone when you record again, take another snapshot or close the tab.
  • Switched off when you are done: pressing Stop, switching to another tab, moving to another page, changing language or closing the tab turns the microphone or camera off completely, and the browser's recording or camera indicator goes out with it.
  • Declining is fine: if you decline, the page lists troubleshooting steps for each browser and system, and the other tests still work.
• No other tool uses the camera: apart from Device Tester's webcam test and the Pixel Smith Screen recorder above, no tool on this site asks your browser for camera access, and no tool can reach the camera in the background. One thing is worth explaining: the ID watermark in Pixel Smith Image Tools (www.pocketool.app/pixel-smith/) has a "take a photo" button. Pressing it opens your system camera app, you take the photo yourself, and the app hands the file back to the page. The page never holds camera permission and cannot start the camera on its own. That photo is processed in your browser like any other and is not uploaded.
• Clipboard: the tools on this site only write to the clipboard, and only when you press a copy button. (This site's Word and Character Counter, Chinese Number Converter and Chinese Converter, some pages of the Office Life Calculator, QR Code Maker, Kaomoji Garden, the Taiwan ZIP Code Lookup and Pixel Smith all have copy buttons.) No tool on this site reads your clipboard, and none queries clipboard permission in the background. Only three places handle content you paste yourself: the scan page in QR Code Maker (/scan/) takes an image you paste, and this site's Word and Character Counter and Chinese Converter take text you paste. All three handle only what you pasted that time, and all do it inside your browser.
• System sharing: the output of Pixel Smith can be handed to another app through your device's built-in share sheet. Only the image file is handed over, and it does not pass through this site's servers.
• The keyboard test can see which key you pressed: the keyboard test in Device Tester (www.pocketool.app/device-tester/) has to read the keys you press, the actual character, the key code and the modifiers, in order to show them on screen. They exist only in the page's memory, are never written to storage and are never sent anywhere, and the analytics event records only which test mode you used. Even so, please do not type passwords or other sensitive text on the test page.
• The sound test plays audio, it never listens: the sound test in Device Tester uses your browser's built-in audio to play test tones through your speakers or headphones (left and right channel, a single tone, and a sweep). It never touches the microphone and records no audio; to test a microphone, use the separate microphone test. Turn your volume down before you start.
• Other permissions: no tool on this site asks for location, notifications or device sensors, and none registers a service worker. Device Tester declares that the camera and microphone may be used only by www.pocketool.app's own pages, so content from other sites embedded in those pages, such as ads, cannot use them, and declares location switched off; Pixel Smith likewise declares that the camera, microphone and screen sharing may be used only by www.pocketool.app's own pages (from 10 October 2026, for the Screen recorder) and declares location switched off.

3. Use of cookies

A cookie is a small text file a website stores in your browser. This site uses cookies to analyse traffic (Google Analytics) and, through third party ad providers, to serve ads (Google AdSense), within the scope described at the top. Among the tools under a path, only Kaomoji Garden, Pixel Smith and Pocket Word King set cookies of their own. Kaomoji Garden sets two: a language cookie every visitor gets (kao_locale, used only under /kaomoji, lasting a year, holding only the code of the last language you used; the server reads it only to choose which language to send you to when you open /kaomoji/, and does not log or keep it), and, only once you sign in, one that keeps you signed in for 30 days. Pixel Smith sets its cookies only once you sign in: the Photo Editor's cloud save sets two cookies used only under /pixel-smith: one holds the sign-in session (__Secure-ps_sess, HttpOnly, lasting 30 days, a random value of which the server stores only a hash), and the other is a "signed in" flag with no identity in it (ps_signed_in), so the page knows whether to load your project list. Both are cleared when you sign out or delete your account. Pocket Word King, too, sets its cookies only once you sign in: two cookies used only under /vocab, one holding the sign-in session (__Secure-vocab_sess, HttpOnly, lasting 30 days, a random value of which the server stores only a hash), and the other a "signed in" flag with no identity in it (vocab_signed_in), so the page knows whether to load your learning and test records. Both are cleared when you sign out or delete your account. The code of the other tools sets none, and neither does the problem report page, which keeps its sign-in credential only in the tab's memory and writes nothing to localStorage or sessionStorage. The other cookies you see in your browser come from third party scripts: Google Analytics, Google AdSense and the Google "Privacy & messaging" script loaded with it (such as FCCDCF and FCNEC, which record your privacy choices and the state of related messages and last about a year), and g_state, set by the Google sign-in script (see section 6). You can manage or delete cookies and site data in your browser settings, though disabling some cookies may affect features such as signing in.

Besides cookies, the tools use your browser's localStorage (and, in a few cases, sessionStorage, which lasts only as long as the tab) to remember things. That data stays on your device, and what it holds varies by tool:

• This site's pages keep something only for site search: the code of this site's own pages (including the Word and Character Counter, the Chinese Number Converter and the Chinese Converter) sets no cookie, and the text you enter into these three tools, and the files you pick in the Chinese Converter, are never written to browser storage. The one exception is site search: what you type into the search box is kept in that tab's sessionStorage, so the search is still there if you close it and open it again, and it is cleared when you close the tab; localStorage also remembers whether "show detailed results" is on. Both stay in your browser and are never sent. The Google AdSense script on this site's pages also writes its own settings to localStorage (such as google_ama_config, the placement rules for Auto ads). The code of QR Code Maker sets no cookie of its own and writes to localStorage in one place only: on the batch label printing page, when you tick "remember this printer's offset" yourself, it stores two numbers, the horizontal and vertical offset (under the key qrcode-studio-label-offset), and deletes them when you untick it. The list, the text on the labels and the label sheet model are not stored.
• Preferences only: the Office Life Calculator (light or dark), Pixel Smith (language, watermark style and HEIC conversion options, never your photos, file names or the text you typed; Blur, pixelate or add text, the Image converter, the Screen recorder and the Photo Editor remember no settings at all, and the Photo Editor's cloud save writes nothing to browser storage) and Device Tester (your best click-speed score, which the page can clear in one tap).
• Items you picked on the site: Kaomoji Garden's favourites, recently used items, style, skin tone and language preference (the language is also kept in the kao_locale cookie described above, which is sent to the server). It also records in that tab's sessionStorage which Emoji combo ids have already been reported, so the same copy is not reported twice (see section 1), and that is cleared when you close the tab. When you put an Emoji combo together on Kaomoji Garden's Kaomoji page and open the submit page from there, the combo also waits in that tab's sessionStorage until the submit page reads it, and is deleted straight away. It is never added to the page address. Once the submit page has it, it checks the combo against the ones already on the site, as it does for a combo you type, which sends the combo to the server; the combo is published only if you submit it.
• Pocket Word King: when you are signed in, a copy of your learning record is kept in the browser's IndexedDB (see section 1; deleted when you sign out or delete your account). localStorage holds a random visitor number and screen states such as whether you have seen the tour, which streaks have been celebrated, whether stories show Chinese, and which exam is selected on the mock tests page and its "only tests not taken yet" switch, none of which identifies you. During a test, answers not yet sent to the server are also kept there for the moment, and removed once they are sent, or when you submit or abandon the test. Browsers that used Pocket Word King before October 4, 2026 also still hold the progress saved locally at the time (the app-guest IndexedDB database); the new version neither reads nor uploads it, and you can clear it in your browser's site data settings.
• Text you typed yourself, which is worth spelling out for two tools:
  • Taiwan ZIP Code Lookup: "My saved addresses" holds the full addresses you saved, lane, number and floor included, and is only written when you press save. "Recent searches" writes your last five search strings automatically whenever a lookup succeeds, without you pressing anything. Neither expires or is cleared automatically, and they are deleted in two different places: saved addresses on the saved page, recent searches below the search box.
  • English Shadowing: practice progress, the notes you typed, your vocabulary list, videos you practised recently, daily statistics, and your sentence drill sessions, missed items and running totals. Once you sign in, these are synced to a copy on the server (see section 1). Without signing in they stay in this browser only. A sentence drill you left part way through, the score of your last drill, the questions already drawn, the question types and difficulty, where you left off on each video's Practice tab (stored only as a number of seconds), preferences such as light or dark, interface language, practice mode, the sentence list's colouring mode, voice and speech rate, and a marker that this browser has signed in before all stay in this browser only, and are not synced even after you sign in.

4. Google AdSense and third party advertising

Some pages on www.pocketool.app load the Google AdSense ad script. The three tools on subdomains show no ads (see Scope). In practice:

• Pages that load the ad script: this site's own pages (except the error page), Kaomoji Garden, the Office Life Calculator and the Taiwan ZIP Code Lookup.
• No ad code at all: QR Code Maker, Pixel Smith Image Tools, Device Tester and English Shadowing.
• Auto ads: none of the pages that load the ad script has a manually placed ad slot today, but this site uses Google AdSense Auto ads: on any page that loads the ad script, Google decides whether to show ads and where to place them.
• Some pages have the ad script removed at build time, for example Kaomoji Garden's favourites, search and Emoji combo pages (the home page of each language does load it). Note that if you arrive at one of those pages by clicking through from a page that does have ads, the script already loaded can still run, and this site cannot fully switch it off for that visit.
• Visitors in the European Economic Area, the UK and Switzerland: pages that load the ad script also load the Google AdSense "Privacy & messaging" script. This site has set up Google's European regulations consent message there, so visitors in those regions see a cookie consent dialog in which they can consent or manage their options. Visitors elsewhere do not see it. To change or withdraw your choice later, use the "Privacy and cookie settings" button that Google shows in a corner of the page (usually the bottom left, appearing once you scroll to the bottom), which reopens the same dialog. Google Analytics is not controlled by this dialog; see section 5.

Regarding third party ad providers, please note:

• Third party vendors, including Google, use cookies to serve ads based on your prior visits to this site or to other websites.
• Google uses advertising cookies, including cookies from domains such as DoubleClick and doubleclick.net, which enable Google and its partners to serve ads to you based on your visits to this site or other sites on the internet.
• You can opt out of personalised advertising through Google Ads Settings.
• You can also opt out of some third party vendor cookies used for personalised advertising at www.aboutads.info/choices or www.youronlinechoices.com.

For how Google uses data on its partner sites, see Google's privacy and terms.

5. Google Analytics

This site uses Google Analytics (GA4) to understand how visitors use it. Besides the page views Google records automatically, some tools send custom events:

• Kaomoji Garden: every successful copy sends one event carrying only the kind of item (kaomoji, symbol, emoji and so on), its category and a short code for which item it was; for an Emoji combo submitted by a visitor, that code is its public ID (the letters and digits at the end of its page address). The text you copied is not sent.
• Taiwan ZIP Code Lookup: seven events, covering a lookup that succeeded or found nothing, copying a ZIP code or an address, and generating an English address. The parameters are fixed option strings or true/false values and do not include the address you searched for.
• Pixel Smith Image Tools: nine events: an export from the ID watermark (download, share, copy or A4 print), a finished HEIC conversion, a device that cannot convert HEIC, a finished image conversion (only the output format, the resize mode, whether a size limit was set and the photo details option, never the number of files, file names or the size you entered), a download from Blur, pixelate or add text (carrying only the output format, PNG or JPG), a download from the Photo Editor (carrying only the output format, PNG, JPG or WebP), a sign in, save, open or delete in the Photo Editor's cloud save (carrying only which of those it was, with no project name, size or account details), a download from the Screen recorder (carrying only the mode, the download format, whether it was trimmed, whether the webcam bubble was on and whether only the audio was saved), and a failed recording (carrying only the mode, which source failed and a reason code); the Screen recorder events never carry the recording length, file size, device names, raw error messages or any picture or sound. Their parameters are checked against a fixed list, and an event whose value is not on the list is not sent at all.
• Device Tester: seven events (start, stop, complete, reset, clear local records, the safety notice having been shown once, and the result of a microphone or camera permission request), carrying only the interface language, the test mode and a fixed code for the permission result (allowed, denied, no device found, in use by another program and so on). No device name, device ID, resolution, level, raw error message, sound or picture is ever sent; recording a clip on the microphone test or taking a snapshot on the webcam test sends a single "complete" event.
• English Shadowing: four events on the video page, all named starting with english_shadowing_. Their parameters are only fixed codes and question counts, and do not include the sentences, anything you typed or your vocabulary words. The video id and the video title appear only in the page address and page title that Google attaches to every record automatically, not in the event parameters. Before anything is sent, the code checks the parameters again: a text value that is not a short lowercase code is dropped, and numbers are rounded to whole numbers of zero or more.
  • english_shadowing_tint: sent once when you switch the sentence list's colouring mode (with the buttons or the C key), with mode set to off, words or chunks. Loading your saved setting when the page opens sends nothing.
  • english_shadowing_practice_start: sent once when you press start on the Practice tab. start is where you begin (resume to continue from last time, current for the sentence currently selected in the list, top for the beginning), and level is the video's overall level (a1 to c2, or none if it has not been rated).
  • english_shadowing_practice_round: sent once when a round of practice is finished and the result page opens, including a round that redoes the questions you did not get right first time. Its parameters are all whole numbers: the number of questions (questions), right first time (first_try), right after retrying (retried), not answered (missed), and how many were ordering (order_n) and spelling (spell_n) questions.
  • english_shadowing_practice_quit: sent once when you leave a round before finishing it, that is, when you press End, switch to another tab of the video page, or move to another page of the site. Its only parameter is answered, the number of questions done in that round.
• QR Code Maker: only the batch page sends anything. The event is batch_download, sent once when a download succeeds and once when you press Print labels. It carries three fixed choices: the band your row count falls into (1-10, 11-50, 51-200, 201-500, 501-1000, 1001 and up), the symbology, and the output (SVG, PNG or label sheet). The list itself, the text you entered, file names, templates, the label sheet model and the exact row count are not sent. No other page has custom events.
• No custom events at all: this site's own pages and the Office Life Calculator.

The page views Google records automatically carry the full URL, query string included, so figures written into the URL are sent along with it. Section 1 has the detail.

As for privacy settings, where Device Tester does load Google Analytics it records page views like the other tools: one for the page you land on and one each time you move to another of its pages. The recorded address leaves out anything after #, so switching test modes within a page is not recorded again. It also switches off Google signals and ad personalisation. The other tools use Google Analytics' default settings. Either way, Google's script sets a first party cookie in your browser by default. Google uses your IP address to estimate your approximate location, but according to Google, GA4 does not log or store IP addresses. Neither this site nor the tools under a path use Google's Consent Mode, so the consent dialog in section 4 does not affect Google Analytics. You can install the Google Analytics opt-out browser add-on to stop being counted by Google Analytics.

Device Tester's measurement ID is supplied by the deployment environment, and with none set it loads no Google Analytics and sends no Google Analytics request at all. Spinning Top Arena and Taiwan Life Calculator each use their own Google Analytics, and Speak Cards uses no Google Analytics; see Scope.

There are also two counts this site keeps itself, neither of which carries anything identifying a visitor: English Shadowing records which video was opened or practised (just the video id and a fixed action type), and Kaomoji Garden records which Emoji combos were copied (see section 1).

6. Other third party services

Besides Google AdSense and Google Analytics above, some pages use the services below. Each is run by its own company, which handles the data it receives under its own privacy policy:

• YouTube embedded player: an English Shadowing video page loads no player by default. The YouTube embedded player loads when you press the start practice button, or when the URL you opened already carries a timestamp or a sentence number (as the "continue" and "practise this line" links on the home page do, and as a link someone shares with you may). The player is served by YouTube (Google) directly, and once it loads YouTube and Google may set cookies, receive your IP address and device information and record playback, under the Google Privacy Policy. This site does not pass your account data to YouTube. Video thumbnails are usually served by this site; a few that have not been stored yet are fetched from YouTube's image servers.
• Google Identity Services: the "sign in with Google" button in Kaomoji Garden, English Shadowing, the Pixel Smith Photo Editor, Pocket Word King and the problem report page is provided by this Google script. English Shadowing loads it as soon as you open the site, whether or not you have ever signed in, and Google therefore sets a cookie named g_state on this site's domain (lasting about six months) to record the state of the sign-in prompt, even if you never sign in. Kaomoji Garden loads it only when you open the sign-in dialog. The Pixel Smith Photo Editor waits longer still, loading it only when you press "Sign in with Google" under Cloud projects, not when you open the page or the dialog. Pocket Word King loads it only when you are signed out and a sign-in button is needed: when you open the "登入" (sign in) menu at the top right, the Settings page, or the mock tests' introduction or results page; just browsing other pages does not load it. The problem report page loads it only when you press a sign-in button. Once any of these other than English Shadowing has loaded it, Google may set the same cookie. What Google account data the five receive, and how to revoke it, is in "What this site gets when you sign in with Google" in section 1. To verify the signature on the credential, this site's server fetches Google's public keys, and that request carries none of your data.
• Anthropic (Claude) and OpenAI (Codex): the owner uses these companies' AI tools to help sort problem reports. Report content handed to them (descriptions, follow-ups, screenshots and device details) is sent to their services in the United States and handled under their own policies; see "Problem reports" in section 1. No other tool on this site hands your data to these two companies.
• Cloudflare Workers AI: the first time English Shadowing takes in a new video, it sends the video's title, channel name, duration and YouTube captions (up to 16,000 characters) to Cloudflare's AI service to generate a Chinese summary, topics and outline. What is sent is YouTube's video details and captions, not anything you typed or any of your practice records.
• Cloudflare Turnstile: when you submit an Emoji combo or post a comment in Kaomoji Garden, the page loads Cloudflare Turnstile to check that the request comes from a person rather than a script. For that check Cloudflare receives signals such as your IP address and your browser's user agent. It is not loaded while you only browse. See the Cloudflare Turnstile Privacy Addendum.
• Cloudflare Web Analytics: on every page of this site and its tools, including the three subdomains beyblade, speak-cards and tw-life-calc, Cloudflare automatically adds the Cloudflare Web Analytics script as it delivers the page; the Taiwan ZIP Code Lookup (www.pocketool.app/zipcode/) also loads a copy of its own. The problem report page is the exception: its response headers do not let Cloudflare modify the page, so the script is never added to it. The script sends Cloudflare the page URL and the referring page (both without anything after ? or #), browser information, and performance data such as load times and memory use, to count page views and measure page speed. According to Cloudflare, it does not use client-side state such as cookies or localStorage, and does not fingerprint individuals by IP address or user agent.
• Google Fonts: fonts on this site and in Pocket Word King, Kaomoji Garden, Pixel Smith Image Tools and English Shadowing are served by Google Fonts, so your browser downloads font files from Google's servers when a page loads, and Google receives connection information such as your IP address. See the Google Fonts privacy FAQ. QR Code Maker and the problem report page ship their fonts with the site (the problem report page uses your device's system fonts for Chinese), and the Office Life Calculator, the Taiwan ZIP Code Lookup and Device Tester use only the system fonts already on your device, so none of those five contacts Google for fonts. One more detail: the ID watermark in Pixel Smith offers 12 Chinese fonts, Blur, pixelate or add text uses Noto Sans TC, the font shared across Pixel Smith, and the Photo Editor lets you pick text fonts from some of those or the system font. Before drawing text, these Google Fonts download the font subsets covering the characters you typed, so Google can infer which character ranges you used, but the text itself never appears in the URL sent to Google. This site's own Word and Character Counter, Chinese Number Converter and Chinese Converter work the same way: the first time certain characters appear on screen (text you paste, or the Chinese numerals in a converted amount), your browser downloads the Noto Sans TC subsets covering them, and those requests do not contain your text or amount either.
• Hosting: this site and its tools run on Cloudflare, which processes connection information such as your IP address to deliver pages and protect against attacks.

Article images and list thumbnails on this site are served from blog-img.pocketool.app, a domain this site owns and also hosts on Cloudflare, not a third party image host. The site search index is a static file of this site's own, and the search runs in your browser without any external search service. Apart from the services listed above, this site and its tools use no other third party tracking, error reporting or session recording tool.

7. How the information is used

The information we collect is used only to:

• provide and maintain the site and the tools;
• analyse and improve the content and the experience of using the site;
• serve ads relevant to the content of this site;
• handle and reply to the problem reports you send;
• prevent abuse and keep the service secure (the Cloudflare Turnstile check, rate limits, the daily and per-network quota counters, and stopping a suspended account from registering again).

We do not sell your personal data.

• Sharing and service providers: hosting, the databases, file storage, AI summaries and the human check are handled by Cloudflare; sign in, traffic statistics, advertising, fonts and video playback are provided by Google; problem reports are sorted by the owner with the help of Anthropic's and OpenAI's AI tools, and only rewritten summaries go into GitHub issues. Sections 1, 4, 5 and 6 set out what each of them receives. Beyond that, this site does not give the account data held on its servers to any other third party.
• Processing outside Taiwan: Cloudflare and Google operate in many countries, so your data, including the account data held on this site's servers and the connection information described above, may be transferred, processed and stored outside Taiwan. The only databases given a location are the ones behind the Pixel Smith cloud save, Pocket Word King and problem reports, all created with a Cloudflare location hint for Asia Pacific; that is a preference, not a guarantee of where the data is stored. No other database is pinned to any region. Problem report content handed to the AI tools is sent to the United States; see section 1.

8. How long data is kept

• Most tools hold no user data on a server: this site's own pages, the Office Life Calculator, QR Code Maker, the Taiwan ZIP Code Lookup and Device Tester have no database and store no user data at all, so retention does not arise for them. In Pixel Smith Image Tools, only the Photo Editor's cloud save holds any, and Pocket Word King holds some only once you sign in, as set out below. What they leave in your browser is yours to manage (see section 3).
• Kaomoji Garden:
  • Sign-in session rows are kept for 30 days, and a daily job clears the expired ones.
  • Copy deduplication and daily quota counters are kept for two days.
  • A submitted Emoji combo that never makes the listings and is never copied or reported is switched to not public after 180 days. The row itself is kept, to stop the same combo being submitted again.
  • Accounts, published submissions, comments, favourites, reports and moderation records have no automatic deletion period today. They are kept until you delete your account or this site removes them (section 1 explains what deleting an account does and does not do).
  • The identifier hash kept for a suspended account is currently retained indefinitely, with no clearing period set.
• Pixel Smith Photo Editor cloud save:
  • An account unused for 180 days (no sign in, save, open or project listing) is deleted, with all its cloud projects, by the daily cleanup (03:41 Taipei time).
  • Sign-in sessions expire after 30 days, and data from an upload that was never completed is deleted after 24 hours.
  • When you delete a project or your whole account yourself, the database rows go at once and the stored files follow straight away, or at the latest in the next day's cleanup.
• Pocket Word King:
  • An account unused for 180 days (no sign in, and Pocket Word King not opened while signed in; opening the site while signed in syncs your learning record, which counts as use) is deleted automatically with its learning record and all its test records, sessions included, by the daily cleanup (03:23 Taipei time).
  • You can also press "刪除帳號" (delete account) in Settings at any time, and the database deletes your account, learning record, every test record and your sessions at once, without waiting for 180 days; "重設" (reset) clears only the learning record.
  • Sign-in sessions expire after 30 days, and the same daily cleanup removes expired ones. Signing out only ends the session and does not delete your learning or test records.
  • A test that has not reached its second section (reading for the TOEIC and IELTS question types, listening for the TOEFL question types) 24 hours after it started is marked as unfinished and is not scored (once the second section has started, the test is submitted automatically with your last saved answers when time runs out). Those records are kept like any other test record, until one of the two cases above applies.
• English Shadowing:
  • The daily counter rows for adding videos are deleted once they are more than two days old, the next time anyone adds a new video.
  • Accounts and the learning records synced to the server have no automatic deletion period today, and are kept until you ask for deletion. This tool has no self-service deletion, so ask as described on the contact page.
  • Video records that have been taken in (basic details, captions, the AI generated summary and outline) and video thumbnails are kept indefinitely. Those are not your personal data.
• Problem reports:
  • Screenshots: 30 days after the report is closed or 90 days after it was sent, whichever comes first; the owner can also delete them sooner.
  • Reports, follow-ups and handling records: deleted 180 days after the report is closed; a report that is never closed is kept at most 365 days after it was sent.
  • Accounts: deleted once they have no reports and no sign in for 180 days.
  • Sign-in credentials expire after 2 hours and are then removed by the routine cleanup; daily quotas and network counts are deleted after two days; the hash used to block an account is deleted after a year.
  • The admin activity log (what the owner and the AI tools did) is kept for a year; when a report is deleted, anything in the log about that report is cleared with it.
  • When you delete a report or your account yourself, it is deleted at once; what the AI tools delete on the owner's instruction can be restored for 7 days and is then deleted for good. All of this is carried out by the daily routine cleanup.
• Cloudflare: connection records and server execution logs are handled by Cloudflare under its own retention period. This site does not keep a separate copy and does not use them to analyse individual behaviour.

9. Data security

This site is served over HTTPS throughout. Data held on the server, such as the learning records English Shadowing syncs, the account identifier in Kaomoji Garden, the Pixel Smith Photo Editor's cloud projects and Pocket Word King's learning and test records, is stored as is, without additional encryption by this site, and this site does not read the contents of your notes, vocabulary list or editing projects. The admin interface for problem reports is protected by Cloudflare Access, and only the owner's Google account can sign in; for anyone who tries, the email address and IP address stay in Cloudflare Access's authentication log for 24 hours. The AI tools can get in only with dedicated credentials the owner issues, and the changes they make and their exports are logged. Cloudflare D1 also keeps a history of database changes so the database can be restored to an earlier point, which means deleted data can remain in that history for up to 30 days (7 days on the free plan this site currently uses). While we take care to protect your information, no method of transmission or storage over the internet can be guaranteed to be completely secure.

10. Children's privacy

This site is not directed at children under 13, and we do not knowingly collect personal data from children.

11. Third party links

This site links to its tools, on subdomains or under paths of this site, and to external websites. Once you leave this site, those websites have their own privacy policies, and this site is not responsible for their content or practices.

12. Changes to this policy

We may update this policy from time to time. When we do, the "last updated" date at the top of this page is revised. We suggest checking back from time to time.

13. Contact us

If you have any questions about this privacy policy, you are welcome to reach us through the channels listed on the contact page. To access, correct or delete your data, send a private message to the Facebook page or an email to casper.lecturer@gmail.com as described in the "Account deletion, content removal and rights notices" section of that page, rather than posting in a public comment.