Changelog & Updates
Release notes for Toolzum — new tools, performance work, accessibility passes and security fixes, newest first.
PDF Editor: Safe Parsing & Reliable Redaction
Documents are validated before they reach the parsers, redaction removes the text underneath rather than drawing over it, and tools that fetch a user-supplied URL route through our own origin.
Change Details
- security: Hostile-file screening before parsing — malformed and oversized structures are refused instead of fed to the PDF engine.
- security: Redaction strips the text layer, outline bookmarks and repeated destination names, and flags nested XObjects it cannot clean.
- security: User-typed-URL tools relay through our own origin, keeping them working under the Content-Security-Policy without exposing the destination to the browser.
- feature: Annotation list panel — every comment, stamp and signature is reachable without hunting on the canvas.
- fix: Keyboard control, focus order and screen-reader labels through the editor; signatures announce where they sit on the page.
- performance: Thumbnails render only for the pages in view, and the editor engines load on demand.
Full Image Editor: Layers, PSD & Retouching
Layers, masks, PSD round-trips, retouching, curves and animation — the photo editor now covers the everyday desktop editing workflow, entirely in the browser.
Change Details
- feature: Raster layer engine — add images, blend modes, opacity, drag-reorder, and non-destructive paint-on masks.
- feature: Photoshop interoperability — import PSDs with text, groups, adjustments and effects, and export a layered PSD back out.
- feature: Retouch toolkit: healing brush, clone stamp, liquify (push/bloat/pinch), skin smoothing, teeth whitening and reshape.
- feature: Object removal and content-aware fill, magic wand and lasso selection with feather and edge refinement, plus subject selection.
- feature: Adjustment layers, curves, levels, per-colour HSL mixer, LUT import, white-balance eyedropper, clarity, denoise and sharpen.
- feature: Animation timeline with GIF and APNG export, film looks (vignette, grain, bokeh), stickers, curved text, and print-ready DPI/PDF/SVG export.
- feature: Projects save and reopen as .tzp files with autosave, named checkpoints and batch apply — one look across many photos, delivered as a ZIP.
- performance: Preview repaints coalesced to one per animation frame, graded base cached, undo depth raised to 80 steps, and lower-end canvases get a size guard.
- fix: Colour-profile aware import and export — source ICC read, sRGB re-embedded so colours do not shift on the way out.
PDF Editor: Forms, Signatures & Editable Export
Fill real AcroForm fields in place, sign with a signature you drew once, and choose whether your annotations stay editable or get flattened into the page. Plus a searchable OCR layer and a local PII pattern scan before you share anything.
Change Details
- feature: In-place AcroForm filling — existing PDF form fields accept text, checkboxes and dates in the file's own layout.
- feature: Signature vault parity: draw or save a signature once, then place it with initials and date stamps on any page.
- feature: Export choice — Editable (annotations stay separate) or Flattened (burned into the page), with links live in both.
- feature: Searchable OCR text layer added on export, so scanned pages become selectable instead of flat images.
- feature: Local PII pattern scan with a review list — catches card numbers, IDs and phone numbers without sending the document anywhere.
- security: Clean-metadata export is the default, drafts expire, and 'wipe local data' removes both editor databases.
- fix: Pinch-zoom anchors on your fingers, the canvas stays above the mobile keyboard, and budget phones get tighter memory discipline.
- feature: PWA file handlers and share target — 'Open with Toolzum' sends a PDF straight into the editor.
Trust & Resilience Program
Privacy policies rewritten around the current product, a consent banner that disables analytics on decline, instant AI kill-switches, and an offline page for uncached visits.
Change Details
- feature: Consent banner: Decline disables analytics immediately, with a reset control to revisit your choice anytime.
- feature: AI features can be paused instantly during an incident, with no rebuild or redeploy.
- feature: Offline fallback page: uncached visits show a helpful page instead of a browser error.
- feature: Onboarding tour fixed on mobile; search and dashboard empty states guide you onward.
- fix: Legal pages audited line-by-line against the live product; subscription, copyright, and children's terms added.
- fix: AI errors now say you're offline when you are — and never auto-retry paid requests.
- security: Bot-rate guards on AI endpoints, repaired abuse logging, Next.js security upgrade.
Accessibility Pass, Live Credits & Adaptive WASM
Every form field announces its name to screen readers. Credit balances go live instead of day-old snapshots. Low-end devices skip the heavy video engine. Quota copy distinguishes guest, signed-in and Pro states.
Change Details
- feature: Form labels bound for screen readers across 800+ inputs — fields announce their names instead of silence.
- feature: Skip link jumps past navigation on every page; dialogs trap focus, close on Escape, and return focus on dismiss.
- feature: Live credit balances — dashboard and account read true remaining credits from the server ('X remaining of 200/mo').
- fix: Download badge reads server plan state — Pro users never see quota copy; anonymous users on Pro tools get 'Sign in' instead of 'used up'.
- performance: Low-end devices skip the multi-threaded video core and get heads-up toasts before large AI and OCR downloads.
- fix: Contract suites added for credits and downloads endpoints — 1,141 tests green across 196 files.
- fix: Beyond-plan catches from the same pass: palette Space hijack fixed with focus-return on close; dropzones, indexed rows, and selects named; hidden file inputs keyboard-focusable; 294 controls labeled from nearby text; hover/drag-only containers keyboard-accessible.
30 New Tools & Platform Hardening
30+ new tools across image, PDF and text workflows, a rebuilt homepage upload box, and account pages tuned for 100k+ users.
Change Details
- feature: 30+ new tools: bulk image upscaling, HEIC/AVIF conversion, AI watermark removal (single + batch), bulk PDF operations, and text utilities.
- feature: Homepage upload box improved — keyboard accessible (Tab + Enter), proper ARIA labels, animated file detection, better Remove button.
- fix: Sign-in reliability: sessions are detected correctly across client and server after authentication.
- performance: Account, payment and session queries indexed — dashboard and history pages stay fast at 100k+ users.
- security: Account suspension now applies consistently across API routes.
Calculator Renaissance
Every calculator on the platform gets a premium pass — two-column layouts, result history, auto-calculate. A full accessibility audit ensures every tool works for every user.
Change Details
- feature: Calculators redesigned: two-column layout with result panel, one-click copy/download, calculation history, and presets across 80+ calculators.
- feature: Auto-calculate across health, finance, and math tools — results appear as you type, no Calculate button needed.
- fix: Calculation accuracy improved across 20+ tools — edge cases like empty inputs, impossible values, NaN, and overflow handled gracefully.
- fix: Accessibility pass: screen reader support, keyboard navigation, and proper labels added to all interactive elements across 39 tools.
- performance: Page loads faster — heavy code removed from initial bundles, images optimized to WebP, tools load on demand.
- fix: Gas mileage NaN bug, fraction calculator stack overflow, and modulo computation errors all resolved.
Auth Rebuilt & Account System
Authentication rebuilt on a single session model, alongside a full account system.
Change Details
- fix: Authentication rebuilt on a single session model — redirect issues, session persistence and cookie conflicts resolved.
- feature: Account page: edit profile, change password, manage active sessions, export favorites, and delete your account.
- feature: Favorites system: star any tool, see them on your homepage, and jump to them instantly from search (Cmd+K).
- security: Bot protection (Turnstile CAPTCHA) added to sign-up, sign-in, and password reset flows.