Privacy Policy

Last updated: March 1, 2026

This Privacy Policy describes how bnto ("we", "us", or "our") collects, uses, and protects your information when you use bnto.io (the "Service").

The Short Version

  • Client-side processing. Many of our tools run entirely in your browser using WebAssembly. When a tool runs client-side, your files are processed on your device and are not uploaded to our servers.
  • Minimal data collection. We collect only what's needed to provide and improve the service — an email address if you create an account, and usage data (which tools you use, when, and how long they take).
  • Analytics. We use analytics to understand how the service is used, identify issues, and improve the experience for all users — including those on the free tier.
  • Open source engine. Our core engine is MIT licensed and publicly available.

What We Collect

Information You Provide

If you create an account, we collect your email address and name. You can use bnto without creating an account — all browser tools work without signing in.

Information Collected Automatically

  • Usage data. We record which tools you use, when you use them, and how long processing takes. This helps us understand which tools are popular and identify performance issues.
  • Analytics data. We use analytics tools to understand how people use the service, measure performance, and identify problems. This may include page views, feature usage, browser type, and general location (country/region level).
  • Standard web server logs. Our hosting provider (Vercel) may collect standard web server information such as IP addresses, browser type, and pages visited. This is governed by Vercel's Privacy Policy.

Files and Client-Side Processing

Many bnto tools run entirely in your browser using WebAssembly. When a tool runs client-side, your files are processed on your device — they are not uploaded to or stored on our servers. Some tools or features may require server-side processing, in which case files are transmitted securely and are not retained after processing is complete.

How We Use Your Information

  • Provide the service — manage your account, track usage, and deliver features you've requested.
  • Improve the service — understand which tools are most used, identify bugs, and improve performance.
  • Communicate with you — send service notifications (such as changes to our terms or policies), product updates, and occasional announcements. You can unsubscribe from non-essential communications at any time.

Cookies

We use cookies to provide and improve the service:

  • Authentication cookies. Session cookies that keep you signed in. These are HttpOnly and secure — they cannot be read by JavaScript running on the page.
  • Sign-out signal cookie. A short-lived cookie (expires in 10 seconds) used during the sign-out process to ensure a smooth redirect. It is automatically deleted.
  • Analytics cookies. Our analytics tools may set cookies to understand how you use the service and to measure performance.
  • Theme preference. Your light/dark mode preference is stored in your browser's local storage, not a cookie.

Third-Party Services

We use the following services to operate bnto:

  • Convex — Database and backend. Stores account data and usage events.
  • PostHog — Product analytics. Helps us understand how the service is used and identify issues.
  • Vercel — Web hosting. Receives standard web server logs.
  • Cloudflare — DNS and CDN. Handles standard web traffic routing.
  • GitHub — OAuth sign-in (optional). Receives your email address if you sign in with GitHub.

We do not sell your personal information to third parties.

Data Retention

  • Account data is retained as long as your account is active. You can request deletion at any time.
  • Usage data is retained for analytics and billing purposes. Anonymous usage data may be retained indefinitely in aggregate form.
  • Execution records (which tool, when, duration) are retained as long as your account is active.

Data Security

We take reasonable measures to protect your information:

  • Authentication tokens are stored in HttpOnly, secure cookies
  • All traffic is encrypted via HTTPS
  • Our backend (Convex) provides built-in access controls and data isolation
  • Files processed by client-side tools stay on your device — the most secure data is data we never have

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Children's Privacy

bnto is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Your Rights

You may:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your account and associated data
  • Export your data

To exercise any of these rights, contact us at the email below.

Links to Other Websites

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of other sites. We encourage you to review the privacy policy of any site you visit.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. For significant changes, we will provide notice through the Service.

Contact Us

If you have questions about this Privacy Policy, you can reach us at: