A file toolbox that keeps growing.
Morsel converts and compresses files with Wasm and WebCodecs. New tools are added continuously; the server keeps the account, job, and billing records needed to run the service.
Operator
- Legal entity
- Goof Technology (Guangzhou) Co., Ltd
- Registration number
- 91440106MAKRKDRW6J
- Registered address
- Room B23, Floor 04, No. 10 Kangti Road, Huangcun, Tianhe District, Guangzhou, Guangdong
- Governing law
- 中华人民共和国,适用中华人民共和国法律
- VAT / tax ID
- 91440106MAKRKDRW6J
Values shown as [PLACEHOLDER: …] must be replaced with the registered details before launch.
What the service does
Morsel is a file utility. You sign in with a one-time email code, choose a tool, and process files. Depending on the tool, processing runs in your browser or on our servers; the tool page states which.
Image conversion and compression, video conversion and compression, archive extraction and creation, and QR generation and recognition are available now. More tools are added continuously.
How files are handled
For browser tools, files are opened with the File API, decoded with WebAssembly, and encoded with Wasm or WebCodecs; output is created in the tab. For tools that upload, the file is sent to our servers, used only for the job, and deleted within 24 hours. The tool page states which path applies.
- Browser tools do not upload file contents; upload tools state it on the tool page.
- Job records store formats, counts, bytes, and durations, not file names or contents.
- Closing the tab stops the work.
Data flow
The table lists every category the service can store and where it lives. For browser tools there is no server-side copy of file bytes; upload tools keep a temporary copy that is deleted within 24 hours.
| Data | Where | Retention |
|---|---|---|
| File bytes | Browser or temporary server storage (per tool) | Browser tools: not stored by Morsel. Upload tools: deleted within 24 hours. |
| Account, session, locale | Cloudflare D1 | Until you delete the account |
| Job metadata (tool, counts, bytes, duration, status) | Cloudflare D1 | As described in the privacy policy |
| Credits, invoices, refund requests | Cloudflare D1 | Accounting retention; pseudonymized after deletion |
| Subscription grants (plan, period, credits) | Cloudflare D1 | Account lifetime and accounting retention |
| Audit log (actor/target IDs, IP hash, action payload) | Cloudflare D1 | Configured audit retention (12 months in production) |
| Contact messages | Cloudflare D1 | Until handled, then per the privacy policy |
| Sign-in and contact email | Resend | Transient delivery |
Subprocessors
Morsel uses two infrastructure providers. The privacy policy lists their roles and the safeguards that apply.
| Processor | Purpose | Operation |
|---|---|---|
| Cloudflare | Static hosting, API worker, D1 database | Global edge network; database region depends on deployment |
| Resend | Sign-in and contact notification email | Vendor-operated infrastructure |
Questions about the operator
Legal, privacy, refund, and support contacts are listed in the footer and in each legal document. Replace the placeholder addresses before taking real traffic.