The short version
Toolaki is built to collect as little data as technically possible. We have no user accounts, we don't ask you for any personal information, and the tools on this site do all their work inside your own web browser. When you use a tool (for example, to convert an image), your files never leave your device. They are not uploaded to us or to anyone else, and we never see them.
This policy explains the few small technical details, in plain English.
Who we are
Toolaki ("we", "us", "the site") operates the website at https://toolaki.com. For the purposes of UK data protection law, we are the "data controller" for the limited processing described below.
If you have any questions about privacy, you can contact us at privacy@toolaki.com.
What data we collect
From you, directly: none. There are no accounts, logins, sign-up forms, or contact forms on the site. We do not ask for, collect, or store your name, email address, or any other personal information. (The only exception is if you choose to email us at the address above, in which case we'll naturally have your email and message, used only to reply to you.)
Your files and content: we never receive them. Every tool on Toolaki runs entirely inside your browser. When you convert or process a file, that file is handled locally on your own device and is never sent to, uploaded to, or stored on any server. We have no ability to see the files you work with.
A setting stored on your device. The site saves one small setting in your browser's "local storage": your choice of light or dark theme. This stays on your device, is readable only by the Toolaki site in your own browser, and is used solely to remember your preference for next time. It is not personal information, it is not used to track you, and it is never transmitted anywhere. You can clear it at any time through your browser settings.
Server logs (via our hosting provider). Like almost all websites, when your browser loads a Toolaki page it connects to our hosting provider to fetch it. Our host, Cloudflare Pages, automatically keeps standard technical logs in order to deliver and protect the site: this can include your IP address, browser type, and the time of the request. Cloudflare acts as our data processor for this. It is used only to keep the site running and secure; we do not use it to identify or track individual visitors. Cloudflare's own data practices are described in their privacy documentation.
Cookies and tracking
We do not set any cookies. We do not use analytics, advertising, tracking pixels, or any similar technologies. The only thing stored on your device is the theme preference described above, which is a functional setting you control, not a tracking cookie. Because of this, the site does not need a cookie consent banner.
Third parties
The site loads no external resources and makes no requests to third-party services: no third-party fonts, analytics, ad networks, or content delivery services. This means nothing about your visit (including your IP address) is sent to Google or any other third party for those purposes.
The only third party necessarily involved is our hosting provider, Cloudflare Pages, which receives the standard technical request data described under "Server logs" above simply because it delivers the website to your browser.
Legal basis for processing
The only processing of personal data is the standard server logging carried out by our hosting provider. Under UK GDPR, our legal basis for this is legitimate interests: specifically, keeping the website available, working, and secure. This is minimal, expected processing with little to no impact on your privacy.
How long we keep data
We don't hold any personal data ourselves. Server logs are retained by our hosting provider according to their own retention practices, not by us. If you email us, we keep your message only for as long as needed to deal with your query.
Visitors from outside the UK
Toolaki is operated from the United Kingdom, and this policy is written around UK data protection law (UK GDPR, the Data Protection Act 2018, and PECR). The site is freely available worldwide, and the practices described here (essentially, almost no data collection) apply equally to every visitor, wherever you are. We do not specifically target users in any other country.
Your rights
Under UK data protection law you have rights over your personal data, including the rights to access it, to have it corrected or erased, to restrict or object to its processing, and to complain to a regulator. Because we hold virtually no personal data about you, there is usually very little for us to act on, but if you'd like to make a request, contact us at privacy@toolaki.com.
If you're unhappy with how we've handled your data, you have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.
Children
Toolaki is a general-purpose utility site and is not directed at children. We do not knowingly collect personal data from anyone, including children.
Changes to this policy
If we change how the site works (for example, if we add privacy-friendly analytics, advertising, or any new feature that involves collecting data), we will update this policy to describe it accurately before or when that change goes live. The "last updated" date at the top shows when it was last revised.
Contact
Questions about this policy or your privacy? Email privacy@toolaki.com.