Privacy Policy

ToolK.io ("the Site") is a free online tool platform. We are committed to protecting your privacy and being transparent about how we handle data. This policy explains what information we collect, how we use it, and your rights.

1. Data Controller

The Site is operated by ToolK.io. For any questions regarding this privacy policy, you can contact us via the information provided in the Contact section below.

2. Data Collected

ToolK.io is designed to minimize data collection. Most tools operate entirely in your browser — your files and data never leave your device.

Data we do NOT collect

• No user accounts, no email addresses, no personal identifiers
• No files are stored on our servers (PDF processing is transient and files are immediately discarded)
• No tracking across other websites
• No data is sold to third parties

Data we may collect

• Analytics data (page views, browser type, country, referrer) — only with your consent via Vercel Analytics
• Error logs (stack traces, browser info) — collected automatically by Sentry to fix bugs
• Security tokens — Cloudflare Turnstile generates tokens to distinguish humans from bots; no personal data is extracted

3. Cookies & Local Storage

We use a minimal number of cookies and local storage entries:

Essential (no consent required)

These are strictly necessary for the Site to function:

• Cloudflare Turnstile — security cookies to verify you are human (cf_clearance, __cf_bm)
• Local storage — your theme preference and cookie consent choice

Analytics (consent required)

These help us understand how the Site is used:

• Vercel Analytics — anonymous page view tracking
• Vercel Speed Insights — page performance metrics

Analytics cookies are only activated if you click "Accept all" on the cookie banner. You can change your choice at any time by clearing your browser storage.

4. Third-Party Services

We rely on the following services, each with their own privacy policy:

• Vercel — Hosting and analytics. Data processed in the US. Privacy policy: vercel.com/legal/privacy-policy
• Cloudflare Turnstile — Bot protection for PDF operations. Privacy policy: cloudflare.com/privacypolicy
• Sentry — Error tracking to fix bugs. Privacy policy: sentry.io/privacy
• Google Fonts — Font delivery. Google may collect IP addresses. Privacy policy: policies.google.com/privacy

5. File Processing

When you use PDF tools (editor, signer, password protection), your file is sent to our secure API for processing. The file is processed in memory and immediately discarded — it is never stored on disk or in any database.

All other tools (text, conversion, generation, etc.) operate 100% in your browser. No data is sent to any server.

6. Data Retention

Analytics data is retained by Vercel for up to 30 days. Error logs in Sentry are retained for 90 days. No other data is stored. Files processed by the API exist only in memory during processing and are immediately discarded.

7. Your Rights (GDPR / CCPA)

Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you have the following rights:

• Right of access — request a copy of any data we hold about you
• Right of rectification — correct inaccurate data
• Right of erasure ("right to be forgotten") — request deletion of your data
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time (for analytics cookies, clear your browser storage or click "Essential only" on the cookie banner)

You also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

The Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

10. Contact

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at: privacy@toolk.io