Privacy Policy & Data Rights
100% Client-Side Processing
All text, code, passwords, PDF files, and images are processed strictly in your local browser memory (RAM / WASM).
Zero Tracking for Free Users
No mandatory account registration or profiling. Access our rotating free tools instantly and anonymously.
Encrypted Auth & Payments
Google OAuth profile data is encrypted in Supabase; subscriptions and payments are securely handled by Lemon Squeezy (MoR).
1. Data Controller & Official Contact Information
Under the EU General Data Protection Regulation (GDPR) and international privacy frameworks, ToolsApp - All-in-One Digital Utilities (Amazon Appstore) and ToolsApp - All-in-One Tools (Huawei AppGallery), including its web portal (https://www.toolsapp.online), Progressive Web App (PWA), and browser extensions, are maintained and operated by independent developer Baris Can Keskin (ToolsApp) who acts as the official Data Controller.
2. Core Architecture: 100% Client-Side Processing & Zero File Transmission
Unlike traditional online file converters that upload sensitive documents to remote cloud servers, ToolsApp is designed from the ground up on the principle of Privacy by Design:
- Total Content Isolation: All 177+ web utilities—including Text Diff, JSON Formatter, Hash Generators (MD5, SHA-256), Base64 Encoders, Image Resizers, Code Beautifiers, and PDF Tools—execute completely on your device using client-side JavaScript, Web Crypto APIs, HTML5 Canvas, and WebAssembly (WASM).
- Zero Transmission Guarantee: Inputs, text snippets, cryptographic keys, uploaded photos, or PDF documents are never transmitted across the network, never cached on remote servers, and never accessible to us or any third party.
- Most tools will function even if you disconnect your internet connection once the page has loaded in your browser.
3. User Accounts, Google 1-Click Sign-In (OAuth 2.0) & Google API User Data Disclosure
Free visitors are never required to register or provide any identity to use the rotating free tool pool. Users who wish to unlock the full 177+ tool catalog, synchronize favorites across devices, or generate Developer API keys may create an account:
ToolsApp allows users to sign in using Google OAuth 2.0. When authenticating with Google, our application requests access solely to standard personal identity scopes (email, profile, openid):
- Collected Data: Your Google name, email address, and profile picture URL (avatar).
- Purpose of Use: This data is used solely to authenticate your identity, display your user profile badge in the header, and link your PRO subscription or API quota to your account.
- Limited Use Guarantee: ToolsApp adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements. Your Google user data is never sold, never transferred to advertising brokers, never used to serve personalized ads, and never utilized to train artificial intelligence or machine learning models.
Account records and session metadata are stored securely in a dedicated Supabase (PostgreSQL) infrastructure compliant with ISO 27001 and SOC 2 Type II, encrypted at rest using AES-256 and in transit via TLS 1.3. User passwords are automatically hashed with salted cryptographic algorithms and are never accessible in plain text.
4. Payment Processing & Billing Security: Lemon Squeezy (Merchant of Record)
All paid PRO memberships and Lifetime deals on ToolsApp are processed by Lemon Squeezy, LLC acting as the official Merchant of Record (MoR):
- Zero Credit Card Data Retention: All credit card and banking transactions are processed directly by Lemon Squeezy and Stripe under PCI-DSS Level 1 certification. ToolsApp never receives, stores, or handles credit card numbers, expiry dates, or CVV security codes.
- Transaction Metadata: ToolsApp only receives customer IDs, subscription status tokens, and order identifiers via cryptographically signed webhooks to grant PRO access.
- Instant 1-Click Cancellation: Users can cancel their subscriptions anytime without hidden lock-ins through the Lemon Squeezy Customer Billing Portal (toolsapp.lemonsqueezy.com/billing).
5. Local Storage (localStorage) and Cookie Policy
ToolsApp utilizes your browser's isolated localStorage purely to remember your user interface preferences. These keys reside strictly on your device:
- toolsapp_theme: Stores your dark or light visual mode preference.
- toolsapp_color_theme: Stores your preferred primary color accent.
- toolsapp_favorites: Stores your bookmarked favorite tools locally.
- toolsapp_sound: Stores whether UI sound effects are enabled or muted.
- toolsapp_cookie_consent: Stores your choice regarding advertising cookies (accepted / rejected).
You can erase all of this stored data at any time by clearing your browser cache and website data.
6. Advertising Partners, Third-Party Cookies & Consent Management
To keep 177+ tools accessible for free across the globe, we partner with advertising networks and voluntary creator platforms:
To sustain 177+ free tools for global users, we utilize the Monetag advertising network. The advertising provider may utilize technical identifiers and cookies for frequency capping, telemetry, and fraud prevention.
For further details on how the ad provider processes technical data, please review the Monetag Privacy Policy.
7. Official Vercel Web Analytics & Speed Insights
To monitor real-world frontend performance, we utilize official @vercel/analytics and @vercel/speed-insights:
- Cookieless Operation: They do not set persistent tracking cookies on your device.
- No Personal Profiling: IP addresses are immediately anonymized; individual users are never fingerprinted or tracked across sessions.
- They only measure aggregate Core Web Vitals (LCP, FID, CLS) and general page view distributions.
8. Browser Extension and PWA Permissions
For the ToolsApp Browser Extension (Chrome Web Store & Microsoft Edge Add-ons) and PWA mobile application:
- activeTab: Used solely to pass selected text or URLs into an active tool when explicitly clicked.
- storage: Used solely to preserve your favorite tools and quick shortcuts on your local machine.
- The extension never monitors browsing habits, never logs URLs, and never transmits web history.
9. Your Rights Under GDPR, CCPA, and Global Privacy Laws
Depending on your jurisdiction (such as the European Union or California), you hold statutory rights including:
- The right to access information regarding data processing,
- The right to rectification or erasure (Right to be Forgotten),
- The right to restriction of processing or to object to processing,
- The right to data portability,
- The right to withdraw cookie consent at any time.
To exercise any of these rights, contact us at toolsappwebsite@gmail.com. Requests are answered free of charge within 30 days.
10. California Consumer Privacy Act (CCPA) Notice
Under the California Consumer Privacy Act (CCPA):
- "Do Not Sell My Personal Information": ToolsApp does not sell, rent, or trade your personal information to third parties for monetary or commercial consideration.
- We do not discriminate against users who exercise their privacy rights under California law.
11. Children's Privacy (COPPA Compliance)
ToolsApp is a general audience digital utility suite. We do not knowingly collect or solicit personal information from children under the age of 13 (or 16 in the European Union).
12. Policy Updates and Effectiveness
We may update this Privacy Policy from time to time to reflect new tools or regulatory standards. Updates become effective immediately upon publication and version changes are documented on our Changelog page.