Privacy Policy

Last updated: August 11, 2026

This Privacy Policy explains what data Tooleras collects, how that data is used, who it is shared with, and the rights you have over your information. We've tried to write it in plain language. If anything is unclear, contact us.

The short version

  • When a tool is labeled In your browser, its stated text, files, and configuration stay on your device. Routes that need a network request name what is sent on their own page.
  • We don't require accounts. There is nothing to sign up for.
  • We collect minimal traffic analytics so we can see which tools are useful and where the site needs work.
  • We display advertising provided by Google AdSense. AdSense may use cookies and identifiers as described in their own policies.
  • The contact form sends what you type to our database so we can reply.
  • You have rights under GDPR and CCPA. We honor them.

1. Who we are

Tooleras is a free online developer tools website published at tooleras.com. For the purposes of GDPR, the data controller for tooleras.com is the operator of the site. You can reach us through the contact form for any privacy question or data request.

2. How Tooleras tools work

A central feature of Tooleras's reviewed workbenches is client-side processing. When a tool page says In your browser and Data sent: None, its stated work happens in the browser using JavaScript and the input is not uploaded to our servers. Check that disclosure on the route you are using rather than assuming every utility has identical data flow.

A few exceptions exist where a tool genuinely needs network access to function. Examples include the IP lookup, DNS lookup, and HTTP headers tools. For those tools, the network request is described in the tool's page and is necessary to produce the result you asked for. Even in those cases, we don't store the lookup or attach it to your identity.

File-processing routes disclose their processing on the tool page. A route labeled In your browser reads and writes the file on your device; the file does not leave your computer unless you explicitly download or share the result. Check a route's disclosure before using sensitive material.

3. What we collect automatically

When you visit Tooleras, our hosting provider automatically receives the standard request information needed to serve and protect the site. Google Analytics and Microsoft Clarity load only if you accept non-essential cookies. Depending on the service and your choice, the information may include:

  • The URL you visited and the URL of the page you came from
  • Your IP address, which is used by our hosting provider for security and abuse prevention
  • The user-agent string of your browser and operating system
  • The approximate country derived from your IP address
  • Timestamps for the request

We use this information in aggregate to understand which tools are popular, identify pages that fail or load slowly, and detect abuse. We do not build behavioral profiles on visitors and we do not sell traffic data.

4. Cookies and similar technologies

Tooleras uses local storage to remember recent tools, interface preferences, and your cookie choice. These first-party entries do not contain tool input or output and are not required to use the tools.

Google Analytics, Microsoft Clarity, and Google AdSense are not loaded until you select Accept. You can withdraw that choice from the Cookie settings control in the footer; declining keeps those services and their non-essential cookies disabled.

5. Third-party services

Tooleras uses a small number of third-party services to operate. Each one is named below with what it does and a link to its own privacy documentation.

Vercel (hosting)

The site is hosted by Vercel. Vercel processes the network requests required to serve pages and stores aggregated traffic information for performance and security. See Vercel's privacy policy.

Supabase (database and contact form)

Tool definitions, blog posts, tags, shortened-link destinations, and contact form submissions are stored in a Supabase-managed PostgreSQL database. Ordinary text typed into the homepage search is sent to Supabase to match catalogue results; Tooleras does not intentionally store those search terms, though normal provider and network logs may apply. Pasted input is detected locally and is not used as a remote search query. When you shorten a URL, its destination is stored so the redirect can continue working. When you submit the contact form, the name, email, subject, and message you typed are saved so we can read and reply. See Supabase's privacy policy.

Google Analytics 4 (traffic analytics)

If you accept non-essential cookies, Google Analytics measures page visits, session statistics, approximate location, browser and device information, and metadata-only tool events such as a tool slug and action type. Tool input, output, button text, file contents, and pasted search content are not included in our custom events. Google Analytics may use a first-party identifier such as the _ga cookie. See Google Analytics data safeguards and the Google Privacy Policy.

Microsoft Clarity (consented experience analytics)

If you accept non-essential cookies, Microsoft Clarity records interaction and performance information used for heatmaps and session playback. Tool workbenches and the homepage paste/search area are explicitly masked so their content is not uploaded; input fields are also masked by Clarity. Clarity may set pseudonymous session identifiers. See Microsoft's Clarity data collection reference, consent documentation, and Microsoft Privacy Statement.

Google AdSense (advertising)

If you accept non-essential cookies, we use Google AdSense to display and measure advertising. AdSense is not loaded after a decline. Google may use cookies and identifiers for advertising in line with its own policies. You can review Google's policies and adjust your ad settings here:

Third-party vendors, including Google, may use cookies to serve ads based on a user's prior visits to this and other websites. Tooleras asks every visitor for consent before loading AdSense, not only visitors in regions where a prompt is legally required.

Google Search Console (search performance)

We use Google Search Console to monitor how Tooleras appears in Google search results. This service receives aggregated data about search queries, impressions, and clicks, but does not identify individual visitors. See Google's privacy policy.

6. Contact form data

The contact form submits the name, email address, subject, and message you provide. We use this data only to read your message and reply. Submissions are kept while we may need them to support the conversation, and removed when they are no longer needed. If you want a contact submission deleted before then, send the request to the contact form and reference the original message.

7. Children's privacy

Tooleras is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information through the contact form, contact us and we will remove it.

8. Your rights under GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

  • Know what personal data, if any, we hold about you
  • Request correction of inaccurate personal data
  • Request deletion of your personal data
  • Restrict or object to certain processing
  • Receive a copy of personal data you provided in a portable format
  • Withdraw consent for processing that depends on consent
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, send a request through the contact form. We may ask for information that helps us verify your identity before acting on a request, especially for deletion and access requests.

9. Your rights under CCPA

If you are a California resident, the California Consumer Privacy Act gives you the right to:

  • Know what categories of personal information have been collected about you and the purpose of collection
  • Request deletion of personal information we hold about you
  • Opt out of the sale or sharing of personal information
  • Be free from discrimination for exercising any of these rights

We do not sell personal information in the traditional sense. We do allow Google AdSense to serve ads on the site, which may be considered "sharing" under California law for purposes of cross-context behavioral advertising. To limit personalized advertising, use Google's ad settings or send a CCPA request through our contact form.

10. Data retention

Aggregated traffic analytics are retained at the levels and durations set by our hosting and analytics providers. Contact form submissions are kept while we may need them to support a conversation and removed when they are no longer needed. Shortened-link destinations are retained while their redirect remains active. Other tool inputs and file contents are not stored by Tooleras; the few network tools disclose the data sent to Tooleras or a public lookup service on their own pages.

11. International transfers

Tooleras is operated using providers that may process data outside your country, including in the United States and the European Union. Where required by law, transfers rely on the Standard Contractual Clauses approved by the European Commission, on the providers' own certifications, or on equivalent safeguards.

12. Security

We use HTTPS for every page on the site, parameterized database queries, and modern access controls on the database. The architecture limits our exposure because most user input never reaches our servers. No system is perfectly secure; if you discover a security issue, please report it through the contact form.

13. Changes to this policy

When this policy changes, we update the date at the top and post the revised text at this URL. Material changes will be highlighted at the top of the page for a reasonable period. Continued use of the site after changes means you accept the updated policy.

14. Contact

For privacy questions, data requests, or anything else covered in this policy, use the contact form. We aim to respond to privacy requests within 30 days.