Privacy Policy

Welcome to ilovetoolbox.com ("Website", "Service", "we", "us", or "our").

ilovetoolbox offers free online tools for working with images, PDF documents, text, audio, video, colors, QR codes, and other digital content. The Website may also include user accounts, saved tools, blog articles, newsletters, contact forms, and other related features.

This Privacy Policy describes the information we collect, how we use and protect it, the circumstances in which we may share it, how long we keep it, and the choices available to you regarding your personal information.

By using our Website, you acknowledge that you have read this Privacy Policy. If applicable law requires your consent for a specific activity, we will request it separately where necessary.

The information we collect depends on how you interact with and use the Website.

2.1 Information You Provide

When you create an account, contact us, subscribe to our newsletter, or use account-related features, we may collect the following information:

• Your name and email address.
• Account credentials and authentication information.
• Your profile picture and any other profile details you choose to provide.
• Messages, questions, feedback, and other information you submit through our contact forms.
• The email address you provide when subscribing to our newsletter.
• Content you save, including favorite tools or saved blog posts.
• Information you provide when requesting account support or help recovering your password.

You are responsible for providing accurate information and ensuring that you have the right to submit it.

2.2 Authentication Information

You may be able to create an account or sign in using your email address and password or an available third-party authentication provider, such as Google.

If you choose to sign in with Google, we may receive basic account information that you authorize Google to share through its authentication service. This may include your name, email address, profile picture, and account identifier.

We do not receive your Google account password when you use Google sign-in.

For password-based accounts, we use password hashing rather than storing passwords in plain text. Authentication tokens and session information may also be processed to keep your account secure and maintain your signed-in session.

Your use of Google's authentication service is also subject to Google's applicable terms and privacy policy.

2.3 Information Collected Automatically

When you visit the Website, certain technical information may be collected or processed automatically as part of its normal operation. This information may include:

• Your IP address and request information.
• Browser type and version.
• Device and operating system information, where available.
• The pages or tools you access.
• Timestamps and basic diagnostic information.
• Information used to detect abuse, enforce rate limits, and protect the Website against security threats.

The specific information available to us depends on our hosting environment and the technical services used to operate the Website.

2.4 Information Related to Your Use of Tools

Our Website offers tools for processing images, PDFs, text, audio, video, and other digital content.

Many of these tools are designed to process content directly in your browser. When a tool performs all processing locally, your input file or text does not need to be uploaded to our servers for that operation.

However, some features may require a file upload, a request to our servers, or the use of a third-party service. For example, profile pictures and blog cover images may be uploaded to Cloudinary.

The way your content is processed depends on the specific tool or feature you use. Not every tool follows the same processing method or provides identical data-handling guarantees.

Before submitting sensitive content, review the instructions for the particular tool you intend to use.

We may use the information we collect for the following purposes:

• To provide, operate, and maintain the Website and its tools.
• To create and manage user accounts.
• To authenticate users and maintain secure sessions.
• To save your favorite tools and other account preferences.
• To receive, review, and respond to contact requests and enquiries.
• To send verification codes, password-reset messages, and other essential service communications.
• To manage newsletter subscriptions and send newsletter messages when newsletter distribution is enabled.
• To maintain blog content and support related user features.
• To monitor performance, investigate errors, and improve Website functionality.
• To prevent fraud, spam, unauthorized access, and other forms of abuse.
• To meet applicable legal obligations.
• To protect our rights, users, systems, and services.

We do not sell personal information as part of our business practices.

We will not use your personal information for a purpose that is incompatible with this Policy unless applicable law permits it or an appropriate legal basis supports the use.

We recognize that files you work with may contain personal, private, or confidential information. Understanding how those files are handled can help you decide which tools are appropriate for your needs.

4.1 Browser-Based Processing

Some of our tools use browser-based technologies to process files directly on your device. In these cases, the original file may remain on your device without being uploaded to our servers.

Processing files in your browser can reduce unnecessary data transfers. However, this does not mean that every interaction with the Website takes place entirely offline or without network requests and other technical processing.

4.2 Uploads and Third-Party Processing

Some features require files or other information to be sent to our systems or service providers.

For example, images used as account profile pictures or blog images may be uploaded directly to Cloudinary through a signed upload process.

When a feature requires server-side processing or a third-party service, the relevant information may be transmitted to the provider responsible for that feature.

We do not guarantee that every uploaded file is automatically deleted immediately after processing. How long an upload remains available depends on the feature, the provider's configuration, the purpose of the upload, and any applicable operational or legal requirements.

4.3 Your Responsibility

Before uploading a file, make sure you have the right to use and process its contents.

Avoid submitting passwords, financial account information, confidential business documents, sensitive personal information, or other highly confidential material unless you have considered the potential risks and determined that the tool is suitable for that information.

We may use cookies and browser storage to support authentication, improve security, and remember your preferences.

These technologies may be used to:

• Maintain your signed-in session.
• Support authentication and security functions.
• Remember your theme and interface preferences.
• Store your cookie consent choices.
• Save certain preferences or dismissed notices locally in your browser.

Where applicable, optional cookies and similar technologies will be managed through our consent interface.

You can manage or delete cookies and browser storage through your browser settings. Keep in mind that blocking essential cookies may prevent you from signing in or using certain account features correctly.

For more details, please see our Cookie Policy.

We use third-party providers to operate and support certain parts of the Website. Depending on the feature and our deployment configuration, these providers may include:

Database and infrastructure providers: These providers help us store and retrieve account information, saved content, contact submissions, newsletter subscriptions, and other operational records.

Cloudinary: We use Cloudinary to host and deliver certain uploaded images, including profile pictures and blog cover images.

Google: Google provides optional authentication when you choose to sign in using your Google account.

Email service providers: These providers help deliver account verification codes, password-reset messages, and other essential service communications.

Hosting and security providers: These providers help deliver the Website, maintain reliable operations, and protect against malicious activity.

Payment providers (future): Our tools are currently free and we do not collect payments. If we introduce paid plans, payments will be handled by third-party payment providers, and we will update this Privacy Policy before collecting any payment information. See our Pricing and Refund Policy pages.

Each provider may process information according to its own terms, privacy policy, and service configuration.

We aim to limit the information shared with third parties to what is reasonably necessary to provide the relevant service. However, we cannot guarantee the independent practices or availability of these providers.

If you subscribe to our newsletter, we collect your email address and any other information needed to manage your subscription.

We use this information to maintain your subscription and send newsletter communications when the feature is active.

You can unsubscribe from marketing emails using an unsubscribe link, where available, or by contacting us through our Contact page.

Unsubscribing from the newsletter does not necessarily stop essential account-related communications, such as password-reset messages or security notifications.

When you submit a contact form, we may collect your name, email address, subject, message, submission timestamp, and related operational information.

We use this information to review and respond to your request, address your enquiry, prevent abuse, and maintain necessary support records.

Please avoid including sensitive information in your message unless it is necessary for us to handle your request.

We may share or disclose information in the following circumstances:

• Service providers: When a provider needs information to deliver a service on our behalf.
• Security and abuse prevention: When reasonably necessary to investigate fraud, abuse, security incidents, or unauthorized activity.
• Legal obligations: When disclosure is required by applicable law, a valid legal process, or a competent authority.
• Protection of rights: When reasonably necessary to protect our rights, users, property, or services.
• Business transfers: In connection with a merger, acquisition, restructuring, or transfer of relevant business assets, subject to applicable legal requirements.
• With your direction or consent: When you specifically authorize a disclosure or request a feature that requires information to be shared.

We do not sell personal information to third parties.

We keep personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, subject to applicable legal requirements.

Retention periods vary depending on the type of information and why it is collected:

• Account information is generally retained while your account is active and may be kept for an additional period when necessary for legitimate operational or legal purposes.
• Contact submissions may be retained while we handle your request and maintain the support records we need.
• Newsletter email addresses may be retained while your subscription is active. We may also retain the information needed to maintain unsubscribe or suppression records.
• Security and diagnostic information may be kept for a limited period appropriate to our security and operational needs.
• Uploaded media may remain available according to the relevant feature and the storage provider's configuration.
• Authentication and password-reset tokens may expire according to how they are implemented.

We may retain certain information when necessary to resolve disputes, enforce our terms, comply with legal obligations, or protect against abuse.

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

Depending on the feature, these measures may include secure authentication practices, access controls, encrypted connections where supported, input validation, and rate limiting.

However, no website, database, transmission method, or electronic storage system can be guaranteed to be completely secure. We cannot promise absolute security.

You are responsible for keeping your account credentials confidential. If you suspect that someone has accessed your account without authorization, please notify us.

Our service providers may process or store information in countries other than the country in which you live.

Where applicable law requires it, we will take appropriate steps to support lawful international transfers of personal information.

Privacy laws and protections in those countries may differ from the laws and protections that apply in your jurisdiction.

Depending on where you live and which privacy laws apply, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate personal information.
• Request the deletion of certain personal information.
• Object to certain types of processing or request that processing be restricted.
• Withdraw your consent when processing is based on consent.
• Request a copy of certain information in a portable format.
• Unsubscribe from marketing communications.
• Submit a privacy complaint to the appropriate authority.

You can update certain profile details through your account settings and may be able to delete your account using the available account controls.

To request assistance or exercise your privacy rights, contact us through the Website's Contact page. We may need to verify your identity before fulfilling certain requests.

In some circumstances, we may be permitted or required by law to retain certain information even when you request its deletion.

The Website is not intended for children under 13 years of age, or for children below a higher minimum age where applicable law requires one.

We do not knowingly collect personal information from children who are not permitted to use the relevant services.

If you believe a child has provided us with personal information inappropriately, please contact us so we can review the situation and take appropriate action.

Our Website may include links to third-party websites, tools, or services.

We do not control these external websites and are not responsible for their content, security, or privacy practices. Any information you provide to them is handled according to their own policies.

Before sharing personal information with a third party, we recommend reviewing its applicable privacy policy.

We may revise this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or information-handling practices.

When we publish a revision, we will update the "Last Updated" date at the top of this page. If applicable law requires additional notice or consent for material changes, we will take the necessary steps.

Your use of the Website is subject to the version of this Policy that applies at the relevant time.

If you have questions about this Privacy Policy, how we handle information, or your privacy rights, please contact us through our Contact page:

Contact page

Please provide enough information for us to understand and respond to your request, but avoid including unnecessary sensitive information.