Privacy Policy

Last updated: 6 November 2026

This Privacy Policy explains what information Toolew (“Toolew”, “we”, “us”) collects when you use toolew.com (the “Service”), how we use it, who we share it with and the choices and rights you have. We have tried to write it in plain language. If anything is unclear, email us at saudaprime@gmail.com.

1. The short version

Most tools never see your data. Text, images, PDFs, audio, video and other files you use with our tools are processed inside your browser on your own device. They are not uploaded to Toolew.
No account is required. If you choose to create one, we store your email address, display name and the projects and favourites you save.
Cookies for ads and analytics are optional. They are only set if you allow them in the cookie banner, and you can change your choice at any time using “Cookie settings” in the footer.
We do not sell your personal information.

2. Information we collect

2.1 Data you process with tools

Tools that run in your browser read your input locally using standard web technologies (JavaScript, WebAssembly, the File API and the Canvas API). This content is not transmitted to our servers. Some tools keep a short local history or your preferred settings in your browser’s storage so you can pick up where you left off; this stays on your device and you can clear it in the tool or in your browser settings.

A small number of tools need to contact a third-party service to work. Each of these tools states which service it contacts on the tool page. Examples include:

Tool type	Service contacted	What is sent
DNS lookup and propagation	Cloudflare and Google DNS-over-HTTPS	The domain name you look up
Currency converter	European Central Bank reference rates (via a public rates API)	The currencies requested
Pwned password checker	Have I Been Pwned range API	Only the first 5 characters of the SHA-1 hash of the password (k-anonymity), never the password
What is my IP / latency tests	Public IP and network-test endpoints	A standard web request from your browser
Video tools	jsDelivr CDN	A one-time download of the processing engine; your video is not sent
YouTube thumbnail downloader	YouTube image servers	The video ID you enter
Speech to text (where supported)	Your browser’s speech service (for example, Google in Chrome)	Microphone audio while recording, handled by your browser vendor

These services receive your IP address as part of any normal internet request and are governed by their own privacy policies.

2.2 Account information

If you create an account, we collect your email address, an optional display name and, if you sign in with Google, the basic profile information Google shares (name, email and profile picture). Passwords are handled by our authentication provider and stored only as secure hashes; we never see them. When you save a project we store the tool name, the input, settings and output you chose to save, and timestamps. Favourite tools are stored as a list of tool names.

2.3 Feedback and contact messages

When you send feedback or use the contact form we store the message type, your message, the optional name, email and rating you provide, the page and language you sent it from, your browser’s user-agent string and a salted, one-way hash of your IP address. The IP hash is used only to prevent spam and abuse through rate limiting; it cannot be turned back into your IP address, and we remove it after 90 days.

2.4 Technical and security data

Our hosting and security provider, Cloudflare, processes technical information such as IP address, browser type, requested URL and time of request in order to deliver the website, protect it from attacks and keep it reliable. Cloudflare may store short-lived security logs according to its own policies.

If you allow analytics cookies, we use Google Analytics 4 to understand which tools and pages are used, how people find the site and whether pages load correctly. We enable IP anonymisation and do not send the content you enter into tools to Google Analytics.

We use Google AdSense to show advertisements. Please note:

Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
You may opt out of personalised advertising by visiting Google’s Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info or, in the EU, www.youronlinechoices.eu.
Google’s DoubleClick cookie and similar technologies may be used to measure ad performance and limit how often you see an ad. Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

We use Google Consent Mode v2. Until you make a choice, advertising and analytics storage is set to “denied”. If you decline advertising cookies, AdSense scripts are not loaded by our consent manager. If you accept advertising but decline personalisation, Google is instructed to show non-personalised ads. Visitors in the European Economic Area, the United Kingdom and Switzerland may be shown a consent message from a Google-certified consent management platform.

4. Cookies and local storage

We use a small number of first-party cookies and browser storage entries that are necessary for the site to work, such as remembering your language, theme and cookie choices, keeping you signed in and storing your local tool history. Optional cookies are used only for analytics and advertising, and only with your consent. See our Cookie Policy for the full list.

5. How we use information

We use the information described above to provide and secure the Service, operate your account and saved projects, respond to your messages, prevent spam and abuse, understand and improve how the Service is used (with consent), show advertising (with consent where required) and comply with legal obligations.

6. Legal bases (EEA, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract to provide your account and saved projects; legitimate interests to keep the Service secure, prevent abuse and respond to feedback; consent for analytics and advertising cookies, which you can withdraw at any time; and legal obligation where we must keep or disclose information by law.

We do not sell your personal information. We share information only with service providers that help us run Toolew, under agreements that require them to protect it:

Supabase (authentication and database for accounts, saved projects and feedback).
Cloudflare (hosting, content delivery, security and optional bot protection on forms).
Google (AdSense advertising and Google Analytics, only as described above, and Google sign-in if you choose it).

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a business transfer such as a merger, in which case this policy will continue to apply to your information.

8. International transfers

Our service providers may process data in countries other than your own, including the United States and the European Union. Where required, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or adequacy decisions.

9. How long we keep information

Account data and saved projects are kept until you delete them or delete your account. Feedback and contact messages are kept for up to 24 months so we can follow up on reports and track recurring issues, and IP hashes are removed after 90 days. Local history and settings stay in your browser until you clear them.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent and to lodge a complaint with your data protection authority.

Self-service: signed-in users can export all their data or delete their account from Account settings. Deleting your account permanently removes your profile, projects and favourites.
Cookie choices: use “Cookie settings” in the footer at any time.
Other requests: email saudaprime@gmail.com. We will respond within 30 days and may need to verify your identity.

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion and correction, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising. We do not sell personal information for money. Personalised advertising cookies may count as “sharing” under California law; you can opt out by declining advertising or ad personalisation in “Cookie settings”, and we honour Global Privacy Control signals by treating them as a refusal of personalised advertising. We will not discriminate against you for exercising your rights.

India (Digital Personal Data Protection Act, 2023)

Where the DPDP Act applies, you may request a summary of your personal data, its correction or erasure, and nominate another person to exercise your rights. You can contact our grievance officer at saudaprime@gmail.com.

11. Children

Toolew is not directed to children under 13 (or under 16 in the EEA and UK) and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

12. Security

We use HTTPS everywhere, strict security headers, row-level access rules so each user can only read their own data, salted hashing for IP addresses and the principle of least privilege for server credentials. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected users of any breach as required by law.

13. Changes to this policy

We may update this policy as the Service changes. The “Last updated” date at the top shows when it was last revised, and we will highlight significant changes on the website.

14. Contact

Questions about this policy or your data: saudaprime@gmail.com.