Privacy Policy — Toolbox

1. Overview

Toolbox ("we", "us") is committed to protecting your privacy. Most of our tools (Word Counter, JSON Formatter, Image Compressor, etc.) process data entirely in your browser — nothing is sent to our servers. This policy explains what limited data we do collect and why.

2. Data We Collect

2a. Analytics (anonymous)

We collect anonymous usage events (page views, tool used, browser type, country) to understand which tools are popular. We do not collect your IP address in analytics, and events cannot be linked back to an individual.

2b. File Sender uploads

When you use File Sender, your file is uploaded to Cloudflare R2 object storage. We store the file name, size, MIME type, and an expiry timestamp. Files are automatically and permanently deleted after the chosen expiry period. We do not analyse file contents. Your IP address is visible to Cloudflare's infrastructure as part of normal network routing but is not stored by us.

2c. Temporary email

The Temp Email tool receives emails sent to a randomly generated address. Email contents are stored in our database and automatically deleted after 24 hours. We do not read or analyse email contents.

2d. Account information

If you create an account, we store your name, email address, and a hashed (bcrypt) version of your password. We never store passwords in plain text.

2e. Local storage

Some tools save preferences in your browser's local storage (e.g. temp email address, upload resume state). This data stays on your device and is never transmitted to us.

3. How We Use Your Data

To provide and improve the Service.
To enforce our Terms of Service and respond to abuse reports.
To send password reset emails (only when requested).
We do not sell, rent, or share personal data with third parties for marketing.

4. Third-Party Services

Cloudflare — CDN, DDoS protection, R2 storage, D1 database, and Workers compute. Subject to Cloudflare's Privacy Policy.
Mailgun — Used to send password reset emails. Subject to Mailgun's Privacy Policy.
Google Fonts — Used on the Font Pairing tool. Google may log font requests. Subject to Google's Privacy Policy.
Cloudflare Turnstile — Used on File Sender for bot protection. Subject to Cloudflare's Privacy Policy.

5. Data Retention

Uploaded files: deleted automatically after the selected expiry (1, 7, or 30 days).
Temp email messages: deleted after 24 hours.
Account data: retained until you delete your account.
Anonymous analytics events: retained for up to 90 days.

6. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@toolsmea.com.

7. Children

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact

Privacy questions: privacy@toolsmea.com