IBAN Toolkit logoIBAN Toolkit

Privacy Policy

Last updated: October 2026.

The short version

Our tools run entirely in your browser. The IBANs, account numbers, and QR codes you generate or validate are never sent to our servers, never logged, and never shared. Tool input values are processed locally by the current implementation. Visiting the site can still generate hosting access logs, as explained below.

What we do not collect

  • No accounts, so no names or emails.
  • No input logging: generated and pasted values stay on your device.
  • No cross-site tracking.

What we may collect

  • Basic server logs (IP address, pages visited, timestamps) may be processed by our hosting provider for delivery, security and abuse prevention. Hosting retention settings have not been independently audited.
  • Aggregated analytics (if enabled) to understand which tools are popular: would require a disclosed provider, configuration and retention policy before deployment.

Cookies

We do not set advertising or tracking cookies. If we add analytics in the future, this policy will be updated first.

Third parties

Pages contain no third-party scripts that receive your input data. (If advertising is added later, the ad provider’s policy will apply to ad impressions only: tool inputs still never leave your browser.)

Children

This site is a developer utility and is not directed at children under 13.

Changes

Material changes will be noted here with a new date. Contact: hello@ibantoolkit.com.

Contact channels

If you contact Mister Ahmad through WhatsApp, Facebook, Instagram or email, your message and the contact details you choose to share are processed by the relevant service and the recipient. Do not include banking passwords, one-time codes or real customer account data. Social links do not embed tracking widgets on this website.

Advertising and consent

No AdSense publisher tag is configured in this version. Before advertising is enabled, this policy will identify the providers and their processing. Google-certified consent management must be configured where required; a generic cookie notice is not presented as an advertising consent platform.

Testing and educational use. Generated identifiers are synthetic and are not checked against live bank directories. A randomly generated value can coincidentally resemble or match a real identifier. Never use generated data for real payments, account applications, identity verification, or to represent a real person or institution.