Privacy Policy
Toolly's Privacy Policy. We process everything client-side, collect minimal data, and respect your privacy. Learn about your rights under GDPR and CCPA.
Introduction
Toolly ("we", "us", or "our") operates a network of 14 specialized tool websites collectively known as the Toolly ecosystem, accessible at toolly.site and its subdomains. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites and tools. Please read this policy carefully to understand our practices regarding your information.
Information We Collect
We collect minimal information necessary to provide and improve our services. The types of information we may collect include:
IP address (for security and analytics), browser type, device information, pages visited, and timestamps. This data is anonymized where possible.
Email address (only if you choose to subscribe to updates or contact us), feedback, and any information you include in support requests.
Theme preference (dark/light), tool settings, and recently used tools. This data is stored in your browser's local storage and never transmitted to our servers.
What we do NOT collect:
- Files uploaded to any of our tools (processed entirely in your browser)
- Text or content you input into tools (processed entirely in your browser)
- Personal documents, images, or media files
- Browsing history from other websites
- Precise geolocation data
How We Use Information
We use the collected information for the following legitimate purposes:
- Service delivery: To operate, maintain, and improve our tools and websites
- Analytics: To understand usage patterns, track performance metrics, and identify areas for improvement
- Security: To monitor for suspicious activity, prevent fraud, and protect against automated abuse
- Communication: To respond to your inquiries, send updates (if subscribed), and provide support
- Legal compliance: To comply with applicable laws, regulations, and legal processes
- Product development: To prioritize new features and tools based on usage data and feedback
We do not sell your personal information to third parties. Google AdSense may use cookies to serve personalized ads based on your interactions, subject to your consent as required by applicable laws.
Client-Side Processing
The cornerstone of Toolly's privacy approach is our commitment to client-side processing. When you use any tool in our ecosystem — whether it's a PDF merger, image converter, text tool, or calculator — all processing happens locally in your browser using JavaScript and WebAssembly.
Your files, text inputs, and data are never uploaded to our servers. They remain on your device throughout the entire processing cycle. When you close the tab or navigate away, the data is gone from memory.
This approach eliminates the risk of server-side data breaches, unauthorized access to your files, and third-party data mining. It also means faster processing since there's no upload/download cycle.
In rare cases where a tool requires server-side processing (such as AI-powered tools that need API calls), this will be clearly disclosed on the tool page before you use it, and you will have the option to opt out.
Cookies & Tracking Technologies
We use a minimal set of cookies and tracking technologies to operate our websites. We do not use cookies for advertising or cross-site tracking.
- Essential cookies: Required for core functionality, theme persistence, and security
- Analytics cookies: Privacy-respecting analytics to understand aggregate usage patterns
- Local storage: Used to remember your preferences (theme, language) without sending data to servers
For detailed information about all cookies we use, how long they persist, and how to manage them, please review our Cookie Policy.
Data Storage & Retention
Since our tools process data client-side, we do not maintain databases of user-generated content. The limited data we do collect is stored as follows:
- Analytics data: Aggregated and anonymized, retained for up to 24 months for trend analysis
- Server logs: Retained for 30 days for security and debugging purposes
- Email subscriptions: Retained until you unsubscribe, at which point your email is permanently removed
- Support communications: Retained for 12 months after resolution for reference
- Local storage: Persists in your browser until you clear it — we have no access to this data
You may request deletion of any personal data we hold about you at any time by contacting us at privacy@toolly.site.
Third-Party Services & Advertising
We use a limited number of third-party services to operate our ecosystem. These services have their own privacy policies, and we encourage you to review them:
Privacy-first analytics (e.g., Plausible or self-hosted) that do not use cookies or track individuals across sites.
For premium tool subscriptions, we use Stripe. We never see or store your full card details — all payment data is handled by Stripe's PCI-compliant infrastructure.
For AI-powered tools that require server-side processing, we use API providers (e.g., OpenAI). Data sent to these providers is governed by their privacy policies.
We use Google AdSense to display ads on non-homepage pages. Google may use cookies and similar technologies to serve ads based on your prior interactions. You can opt out of personalized advertising via Google Ads Settings. See Google's Advertising Cookies policy for details.
We do not sell your personal information. Google AdSense may use cookies to personalize ads for users in regions where consent has been obtained via our consent management platform.
Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information:
Under the General Data Protection Regulation, you have the right to:
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data ("right to be forgotten")
- Restriction — request limitation of processing
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — withdraw consent at any time where processing is based on consent
Under the California Consumer Privacy Act and California Privacy Rights Act, you have the right to:
- Know — request disclosure of personal information collected, sold, or shared
- Delete — request deletion of your personal information
- Correct — request correction of inaccurate personal information
- Opt-out — opt-out of the sale or sharing of personal information
- Non-discrimination — receive equal service regardless of whether you exercise your rights
To exercise any of these rights, please contact us at privacy@toolly.site. We will respond to your request within 30 days.
Security Measures
We implement industry-standard security measures to protect your information:
- HTTPS/TLS encryption: All traffic between your browser and our servers is encrypted using TLS 1.3
- Client-side processing: The majority of our tools never transmit your data, eliminating server-side exposure
- Minimal data collection: We collect only what is necessary, reducing the surface area for potential breaches
- Regular security audits: We conduct periodic reviews of our infrastructure and codebase
- Access controls: Strict access controls limit internal access to user data to authorized personnel only
- Secure payment processing: All payment transactions are handled by Stripe's PCI-DSS compliant infrastructure
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards.
Children's Privacy
Our services are not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us immediately at privacy@toolly.site, and we will take steps to delete such information.
Parents and guardians should be aware that our tools are general-purpose utilities that do not require account registration. Since processing is client-side, children using our tools do not have their data transmitted to our servers.
International Data Transfers
Our servers are located in the United States and the European Union. If you access our services from outside these regions, your information may be transferred to and processed in these jurisdictions.
We ensure appropriate safeguards are in place for international transfers, including:
- Standard Contractual Clauses (SCCs) for transfers from the EEA/UK
- Data minimization — we transfer only what is strictly necessary
- Anonymization of analytics data wherever possible
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes:
- We will update the "Last updated" date at the top of this page
- For material changes, we will provide a prominent notice on our website for at least 30 days
- For changes that affect your rights, we will notify you by email (if subscribed)
- Continued use of our services after changes take effect constitutes acceptance of the updated policy
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, we are here to help.
Get in Touch
Our privacy team responds to all inquiries within 48 hours. For data deletion requests, we process them within 30 days as required by GDPR and CCPA.
privacy@toolly.siteGet in Touch
Have a question, feedback, or need help? Send us a message and we’ll get back to you within 24 hours.