Introduction
Welcome to OnToolBox. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online tools platform.
Information We Collect
1. Account Information
When you create an account, we collect:
- Email address
- Display name (optional)
- Authentication credentials (encrypted)
- Profile information you choose to provide
2. File Processing Data
All file processing happens entirely in your browser. We do not receive, store, or have access to your files. All tools process files locally on your device using client-side JavaScript. Your files never leave your computer.
When you process files, they are temporarily stored in your browser's memory during processing and are immediately discarded once you download the result or close the page. We have no access to these files at any time.
3. Usage Information
We automatically collect:
- Browser type and version
- Device information
- IP address (anonymized)
- Pages visited and features used
- Time and date of visits
How We Use Your Information
We use the collected information to:
- Provide and maintain our services
- Authenticate your account and prevent unauthorized access
- Send important service notifications
- Improve our tools and user experience
- Respond to your support requests
- Detect and prevent fraud or abuse
- Comply with legal obligations
Data Security
We implement industry-standard security measures:
- Client-Side Processing: All file processing happens in your browser. Your files never leave your device and we have no access to them
- No File Storage: We do not store any files you process. Files exist only in your browser's memory during processing
- Encryption: All data transmission uses SSL/TLS encryption
- Secure Authentication: Account credentials are encrypted and securely stored
- Access Controls: Only you can access your account through authenticated sessions
- Regular Audits: We conduct regular security assessments
Data Retention
- Processed Files: Files are processed in your browser and immediately discarded. We never store your files
- Account Data: Retained for as long as your account is active
- Deleted Data: Permanently removed within 30 days of account deletion
Your Rights
You have the right to:
- Access: View all data we have about you
- Correction: Update or correct your information
- Deletion: Request deletion of your account and all associated data
- Opt-Out: Unsubscribe from marketing communications
- Object: Object to certain data processing activities
To exercise these rights, please contact us through the Report Errors page.
Third-Party Services
We use the following third-party services:
- Supabase: Authentication services only
- Google OAuth: Optional sign-in method
- Google AdSense: Advertising services
These services have their own privacy policies. We recommend reviewing them.
Cookies and Local Storage
We use:
- Essential Cookies: Required for authentication and core functionality
- Local Storage: User preferences and session data
- Advertising Cookies: Google AdSense may use cookies for personalized ads
Children's Privacy
Our services are not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
International Users
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of our services after changes constitutes acceptance of the updated policy.