About baabaasheep.party

Free model and product scope

This project focuses on free online tools for PDF, image, text, and developer workflows. It is currently 100% free with no paid tier.

The product direction is browser-first execution with reliable outputs and minimal friction. No intrusive popups and no hidden upgrade traps.

How tool processing works

Tool processing is executed in-browser using client-side JavaScript. For text, image, and PDF tools, the actual input payload (including file bytes) is processed locally during normal usage.

The server is not used as a compute backend for tool transformations. What is sent to the server is intentionally limited to analytics events and report submissions.

Account and authentication disclaimers

• Authentication is username plus password.
• Usernames are mapped to a synthetic auth email internally for Supabase compatibility.
• Email verification is intentionally disabled for this username-only flow.
• Password recovery is not available currently because no user email is collected.
• Use a password manager and store your credentials safely.

Bot protection is enabled on login and signup forms using Cloudflare Turnstile.

Privacy and stored data

• Tool inputs are processed locally in your browser during normal tool execution.
• Supabase stores account data for auth plus profile/favorites records for signed-in users.
• Favorites are user-specific and sync across devices when you are logged in.
• Cloudflare Turnstile tokens are verified on auth requests to reduce abuse.
• Basic aggregate analytics track tool usage counts by slug, not raw tool payloads.

What the server does

• `/api/analytics`: stores aggregate usage counts by tool slug.
• `/api/reports`: stores report form submissions when a user explicitly submits one.
• `/api/auth/*`: handles username login/signup session operations with Turnstile verification.
• `/api/favorites`: stores and returns favorites for the authenticated user.

Analytics counters and report intake are Supabase-backed for durable storage across serverless deployments.

Advanced verification

For technical users, you can verify behavior directly in your browser:

1. Open DevTools and inspect the Network tab while running tools.
2. Confirm tool usage events call `/api/analytics` with a slug only.
3. Confirm `/api/reports` is called only when you submit the report form.
4. Confirm PDF/image tools process files locally without upload requests during conversion/edit actions.

The client bundle is public and can be reverse engineered like any web app. Privacy here is about not uploading user content during processing, not about hiding JavaScript logic from inspection.

Limits and disclaimers

• Each tool enforces size/page/input limits to keep processing stable and predictable.
• Large files and complex operations can still use significant CPU and memory locally.
• Performance depends on browser, device resources, and input complexity.
• For account security, there is currently no password reset flow.

Contact

For account, privacy, or security questions, contact via LinkedIn.

FAQ