Privacy Policy

Last updated: May 2026

1. Overview

ToolBox.fyi (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we use it when you visit toolbox.fyi or use any of our tools.

Short version: Files you upload are processed in memory and immediately discarded. We do not store, log, or share your files. We collect minimal usage data to operate the service.

2. Information We Collect

2.1 Automatically collected

  • IP address — used transiently for rate limiting on server-side tools (e.g. Image Resizer, PDF Compressor). IP addresses are not logged or stored beyond the in-memory rate-limit counter, which resets when the server restarts.
  • Usage analytics — we use a self-hosted instance of Umami, a privacy-first analytics platform. Umami does not use cookies and does not collect personally identifiable information. Data is aggregated (page views, referrer, country) and never shared with third parties.

2.2 Provided by you

  • Email address — collected when you create a Pro account via Clerk. Used only for account management and transactional emails (receipts, password resets). Never used for marketing without your explicit consent.
  • Payment information — handled entirely by Stripe. We never see or store your card details.
  • Contact form submissions — name, email, and message. Used only to respond to your enquiry and deleted within 90 days.

2.3 Files and content you upload

All file processing (images, PDFs, documents) happens in memory only on our servers. Uploaded files are never written to disk, never logged, and are discarded immediately after your result is returned. We cannot and do not access the contents of your files for any purpose.

3. Cookies

We use a small number of cookies and localStorage entries:

  • theme (localStorage) — stores your light/dark mode preference. Never sent to any server.
  • toolbox-consent (localStorage) — stores your cookie consent choice. Never sent to any server.
  • Google AdSense cookies — only set if you click “Accept all” in our cookie consent banner. These are third-party cookies used by Google to serve personalised advertisements. If you choose “Necessary only”, no advertising cookies are set. See Google’s advertising cookie policy for details.

You can manage or withdraw your consent at any time by clearing your browser’s localStorage (Settings → Privacy → Clear site data) and refreshing the page.

4. Advertising

ToolBox.fyi displays advertisements via Google AdSense. Google may use cookies and web beacons to serve ads based on your prior visits to our site and other sites on the internet. You can opt out of personalised advertising by visiting Google Ads Settings.

Advertising cookies are only placed after you grant consent via our banner. If you select “Necessary only”, non-personalised ads may still be shown but no advertising cookies are set.

5. Third-Party Services

We rely on the following third parties to operate ToolBox.fyi:

6. Your Rights

GDPR (EU & UK residents)

You have the right to access, rectify, erase, restrict, or port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise any of these rights, contact us at the email below.

CCPA (California residents)

We do not sell your personal information. California residents have the right to know what personal data we collect, to request deletion, and to opt out of any sale of their data (no sale currently occurs).

Australian Privacy Principles

ToolBox.fyi is operated from Australia and complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You have the right to access and correct personal information we hold about you. To make a request, contact us using the details below.

7. Data Retention

Account data (email, subscription status) is retained for as long as your account exists and for a reasonable period afterward to handle refunds or disputes. Contact form messages are deleted within 90 days. Analytics data (aggregated, non-personal) is retained indefinitely.

8. Children’s Privacy

ToolBox.fyi is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be noted at the top of this page with an updated date. Continued use of the service after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this policy? Contact us at our contact page or by email at [contact@toolbox.fyi].