Steg Tool

Privacy Policy

Steg Tool is an LSB image steganography tool that hides text inside the pixels of PNG, JPG, WebP and AVIF images, and extracts it again. Here is exactly how we handle data.

explore On This Page
expand_more

Effective Date: July 2026

1. Overview & Data Controller

Steg Tool (https://stegtool.com) is an LSB image steganography tool that hides text inside the pixels of PNG, JPG, WebP and AVIF images, and extracts it again. It is built and operated by the 345tool Team, an independent developer collective.

This policy explains what happens to your data when you use the site. The short version: we do not ask who you are, and we do not collect personal information.

Data Controller: 345tool Team
Contact: [email protected]
Website: 345tool.com

2. How the Tool Works

No account is required. The tool opens in your browser and works immediately. You do not register, log in, or hand over an email address to use any of its features.

The processing that powers the tool runs in your browser, in JavaScript, on your own device. Your input is handled locally: it is not uploaded for processing, and we operate no API that receives it.

You can verify this yourself: open your browser's Developer Tools (F12), switch to the Network tab, use the tool, and watch the requests. No request carries your input content.

3. What We Do NOT Collect

We do not collect, store, transmit or process the following:

  • Personal identity — no registration, login, name, email address, phone number or social account is required.
  • Your input content — what you type stays in your browser's memory and is gone when you close or reload the page.
  • Your results — anything the tool produces exists only in your browser.
  • Clipboard content — copying uses the browser's built-in Clipboard API; content never passes through our servers.
  • Payment information — the site is completely free. There is no payment system and no financial data involved.
  • Behavioural profiling — no tracking pixels, no cross-site tracking cookies and no browser fingerprinting.

4. What We DO Use

No browser storage — this tool does not write preference or history values to your device. Everything you do is discarded when you leave the page. Google Analytics 4 (GA4) — counts anonymised page views for operational insight. It receives no input content, no results and no personal identifiers.

5. Browser Storage: None

This tool does not use cookies and does not write to localStorage. Nothing you enter is remembered after you leave the page.

You can inspect or delete them at any time through your browser's Developer Tools (Application → Local Storage) or by clearing site data.

6. Google Analytics (GA4)

We load a minimal Google Analytics 4 tag (measurement ID G-B0GNEKCVDJ) for aggregated traffic statistics. It tells us how many people visited and which pages they opened — nothing more.

GA4 does not receive your input content, your results, your preferences, or any identifier that could be used to contact you.

GA4 data is processed by Google LLC under their privacy policy. You can block it with any standard content blocker or browser setting.

7. Third-Party Resources Loaded

To render the interface, the page loads a small number of external assets. They are static resources and an analytics script — none of them receives your input content.

  • Google Fonts — typeface and icon fonts, loaded from fonts.googleapis.com.
  • Google Tag Manager / GA4 — googletagmanager.com loads the analytics library (measurement ID G-B0GNEKCVDJ).

We do not embed social-media tracking widgets, third-party comment systems, external login providers or advertising networks.

8. Server Access Logs

Like virtually every website, our hosting infrastructure keeps standard web server access logs for stability, security and bandwidth management. These logs may include a transient IP address, the requested URL, a timestamp and a user-agent string. They are not used to identify individuals and are rotated regularly.

9. GDPR, CCPA & COPPA

GDPR (EU/EEA): we do not require consent for data we do not collect. Because no personal data reaches our servers, there is nothing for you to request or erase — though you are welcome to write to us at any time.

CCPA (California): we do not sell, rent or share personal information, because we do not collect it.

COPPA (children under 13): we do not knowingly collect information from children. The site requires no registration and no personal details.

10. Policy Changes

This policy may be updated to reflect changes in the tool, its dependencies or applicable regulation. The latest version is always available on this page, with the effective date shown at the top.

11. Contact

For privacy questions, data requests or anything else, reach us at: