Privacy Policy

Information you provide

• Account data — name and email address when you register.
• Communications — emails or messages you send to our support team.

Automatically collected information

• Usage data — pages visited, tools used, time spent, referring URLs.
• Device data — browser type, operating system, screen resolution, IP address.
• Log data — server logs including access timestamps and error reports.
• Tracked QR scan data — scan time, country code, and a one-way salted visitor hash used for approximate unique counts. Raw IP addresses and precise locations are not stored in QR analytics.

Information we do not collect

All Toolorah tools run entirely in your browser. Text you type into our tools (passwords, notes, code, etc.) is never sent to our servers. We have no access to it.

Tracked QR exception: when an account holder explicitly saves a tracked URL QR code, its destination and design settings are stored so the redirect and analytics can operate. Scan events remain until the owner deletes that QR code or account.

We use collected information to:

• Operate, maintain, and improve the website and tools.
• Create and manage user accounts.
• Send transactional emails (account confirmation, password reset).
• Send optional product update emails (you may unsubscribe at any time).
• Detect and prevent fraud, abuse, and security issues.
• Comply with legal obligations.
• Analyse aggregate, anonymised usage trends to improve the product.

We do not sell your personal information to third parties.

Your account data is stored on secure servers. We implement industry-standard technical and organisational measures — including encryption in transit (TLS) and at rest — to protect your personal information from unauthorised access, alteration, or destruction.

No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion at any time (see Your Rights).

We use the following types of cookies and local storage:

You can clear browser storage at any time via your browser settings. Doing so will reset your theme and language preferences.

We may use the following third-party services. Each operates under its own privacy policy:

• Google Fonts — delivers web fonts; subject to Google's Privacy Policy.
• Google AdSense (if enabled) — serves contextual ads; may use cookies for ad personalisation.
• Analytics provider — collects anonymised, aggregated usage data.
• Authentication providers — if you choose "Sign in with Google", Google processes your sign-in; no password is stored by us.

We do not share personally identifiable information with advertisers.

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate personal data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Object — object to processing of your data for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at privacy@toolorah.com. We will respond within 30 days.

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance of the new policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

Toolorah
Email: privacy@toolorah.com
Website: toolorah.com