Privacy Policy

This Privacy Policy explains what information ToolHa (“we”, “us”) collects when you use toolha.com (the “Site”), why we collect it and the choices you have. We designed ToolHa to collect as little personal information as possible.

Information we collect

1. Files and values you use in a tool

Browser-based tools read the files and values you provide only inside your browser. We do not receive a copy. When you close or refresh the page, the data is gone, unless you choose to keep a recent conversion in your browser’s history list.

Tools that use our server. A few tools (for example some PDF tools) need our server to do the work. The tool page tells you this before you add a file. Your file is sent over an encrypted connection (HTTPS), used only to create your result, never opened by a person, never shared or sold, and deleted automatically after the short time stated on that tool’s page.

Tools that read a web page for you. The Link Preview Checker asks our server to read the public web page whose link you enter, the way the link-preview robots of apps like Facebook or WhatsApp do, and to measure that page’s share picture. Our server keeps only what it found (the link, the page’s share tags and the picture’s size, never the page or the picture itself) for 10 minutes, so a repeat check is quick, and then deletes it. To stop misuse, it counts how many checks each visitor makes in one hour using a one-way coded version of the IP address; the address itself is not stored, and the count is deleted after the hour.

The Meta Title & Description Checker also reads a page for you, but only when you type or paste a page address into its address box. Our server then opens that public page, reads only its title and its description line, and sends back just those two texts. It keeps what it found (the address, the title and the description, never the page itself) for 10 minutes, so a repeat check is quick, and then deletes it. To stop misuse, it counts how many pages each visitor reads in a minute and in an hour using a one-way coded version of the IP address; the address itself is not stored, and the counts are deleted after the hour. Words you type or paste in that tool are never sent to us. The page addresses you checked last may be kept in your browser’s recent checks list, on your device only.

Tools that download a helper file. A few tools need a large free helper file to do their work inside your browser: for example the background remover in the Photo Editor, or the photo readers and picture makers that open iPhone HEIC photos and save JPG, PNG, WebP or AVIF files. Your browser downloads this file from Hugging Face, Cloudflare or jsDelivr, checks that it is exactly the file we tested, and keeps it in its cache for next time. As with any download, that service sees your IP address and browser type under its own privacy policy. Your pictures and text are never sent to it: the work happens on your device.

Icon and photo search in the Photo Editor. When you search in the Icons panel, only the words you type go to Iconify (api.iconify.design); in the Photos panel they go to Openverse (api.openverse.org) for the WordPress photos, or through our own server to Unsplash (api.unsplash.com), so Unsplash sees our server, not you. Our server keeps each search answer for an hour so a repeat search is quick, and counts searches per visitor with a one-way coded version of the IP address; the address itself is not stored, and the counts are deleted after the hour. The free photos you see and pick load from the WordPress Photo Directory (pd.w.org, with small previews through api.openverse.org) or Unsplash (images.unsplash.com). When you add an Unsplash photo, our server tells Unsplash that this photo was used (their download count, nothing about you). These services see your IP address and browser type under their own privacy policies. Your own pictures are never sent to them.

2. Information stored in your browser

We use your browser’s local storage to remember your light/dark mode, favourite tools, recent searches, recently used tools, recent conversions, the star ratings you gave, if you choose, your word-counter draft, and the last picture you made in the Photo Editor (kept in the browser so you can continue later). A browser cache keeps site files such as styles, scripts and fonts so pages load faster. All of this stays on your device, is not sent to us, and you can clear it at any time. See the Cookie Policy for the full list.

Voice typing (optional). Some tools, such as the Word Counter, let you dictate text. This uses your browser’s built-in speech recognition, and some browsers (for example Google Chrome) send your voice to the browser maker’s service to turn it into text. ToolHa never receives or stores the audio or the text.

Sharing a text (optional). When you share a text from a tool such as the Word Counter, a short text travels inside the link itself, after the “#” sign. Browsers never send that part to our server. A long text gets a short link instead: before anything leaves your device, your browser compresses the text and locks it with a random key, and only the locked copy is stored on our server. The key stays in the link, so we cannot read the text. Locked copies are deleted automatically (currently after 7 days). Anyone you give the link to can read the text.

3. Messages, feedback and tool requests

If you use the contact form we collect your name (optional), email address, topic and message. If you use “Help us make this tool better” or “Request a tool” we collect the type of feedback, the text you type, the tool it is about and, only if you add it, your email address so we can reply.

“Email me when it works again.” While a tool is switched off for a short fix, its page lets you ask for one email when it works again. If you use it, we keep your email address and the tool it is about only for that one email. We send it from hello@toolha.com as soon as the tool is back and then delete your address. We never use it for anything else and never add you to a mailing list.

4. Ratings and anonymous usage counts

When you rate a tool we store the star rating. To stop repeated or automated votes we keep a one-way, salted hash of your network address together with your rating for up to 30 days; the hash cannot be turned back into your address. We also count how often each tool page is opened, as a simple daily total with no cookies and no personal information, to show popular tools.

5. Technical and security logs

Like almost every website, our hosting and content-delivery providers automatically process technical data such as IP address, browser type, pages requested and time of access, to deliver the Site securely and protect it against abuse. Short-lived, hashed network addresses are also used to limit spam through our forms.

If one of our tools runs into an error in your browser, your browser sends us a short technical note (the error message, the name of our file, the page address and the site version) so we can fix it. The note contains no name, email address or IP address.

6. Advertising

We use Google AdSense and may use other advertising partners to show ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to our Site and/or other sites on the internet.

• You can opt out of personalised advertising by visiting Google Ads Settings.
• You can also opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info or, in Europe, www.youronlinechoices.eu.
• Learn how Google uses information from sites or apps that use its services.

Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before advertising or analytics cookies are used, and can change their choice at any time with Cookie settings at the bottom of every page.

7. Analytics

We use Google Analytics 4, provided by Google, to understand which pages and tools are used and to improve the Site. It collects usage information such as the pages you view, how long you stay, the approximate country or city (worked out from your IP address, which Google Analytics does not store), your type of device and browser, and the page that sent you to us. It uses the cookies _ga and _ga_Z4F6CJNENY, described in our Cookie Policy. We never send it the files, text or numbers you enter into a tool, and we only look at aggregated reports that do not identify you.

In the European Economic Area, the United Kingdom and Switzerland, Google Analytics cookies are only set after you click Accept in our cookie message. If you choose Reject, Google Analytics only receives basic signals without cookies or identifiers (Google Consent Mode). You can change your choice at any time with Cookie settings at the bottom of every page, or install the Google Analytics Opt-out Browser Add-on. Learn how Google uses information from sites that use its services.

8. Embedded tools

When a ToolHa tool is embedded on another website, the tool runs in the same private way as on our Site. The website that embeds it has its own privacy policy.

How we use information

• To provide, secure and improve the Site and its tools.
• To answer your messages and handle your requests and feedback.
• To show advertising that keeps the Site free.
• To comply with legal obligations.

We do not sell your personal information for money. Where advertising cookies count as “sharing” under some US state laws, you can opt out as described below.

Legal bases (EEA, UK and Switzerland)

We process personal data on the basis of our legitimate interests (running and securing the Site, preventing abuse, answering messages), your consent (analytics cookies, personalised advertising and other non-essential cookies), and legal obligations where applicable.

Who we share information with

• Hosting, email and delivery providers that run the Site and deliver our emails on our behalf.
• Advertising and analytics partners such as Google, as described above.
• Authorities, if required by law.

How long we keep information

• Messages sent through the contact form: until your request is resolved, and deleted automatically after 24 months at the latest.
• Feedback and tool requests: kept to plan improvements; an email address you added is deleted when it is no longer needed to reply.
• Rating hashes: up to 30 days. Daily view counts: a few days, without personal information.
• “Email me when it works again” addresses: deleted as soon as the one email is sent, and after 90 days at the latest even if the tool is still being fixed.
• Google Analytics: detailed event data is deleted automatically after the retention period set in our Google Analytics account (at most 14 months); after that only aggregated reports remain.
• Server security logs: kept for a short period by our hosting provider.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict processing, to withdraw consent at any time and to complain to your local data-protection authority. Residents of some US states (for example California) may also have the right to know, delete and correct personal information and to opt out of the “sale” or “sharing” of personal information for targeted advertising. To use any of these rights, use our contact page and choose “Privacy request”, or email hello@toolha.com. We will not discriminate against you for exercising your rights.

Children

The Site is intended for a general audience and is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.

Security

We use HTTPS encryption, keep software up to date and limit access to the little data we hold. No method of transmission or storage is 100% secure, but we work hard to protect your information.

International transfers

Our providers may process data in countries other than your own. Where required, appropriate safeguards such as standard contractual clauses are used.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed.

Contact

Questions about privacy? Use our contact page and choose “Privacy request”, or email hello@toolha.com.