If you must use a web app, you can at least use CyberChef, which runs entirely in the client and is widely used in security testing.
https://gchq.github.io/CyberChef/#recipe=To_Upper_case('All')To_Base32('A-Z2-7%3D')
It looks like 'cryptii' also appears to do all processing client-side.