Tooleux

Privacy policy

What information this site does and does not collect, in plain language.

This privacy policy describes what information Tooleux collects, how it is used, and your rights regarding it. It is written in plain language. If any part is unclear, please contact us.

Summary

Tooleux is a browser-only website. Every tool runs entirely in your browser. No files, text, or other input you provide is ever uploaded to a server operated by this site. There are no accounts. The data collected anywhere in the system is the standard request logging performed by the hosting provider (Cloudflare), page-view analytics via Google Analytics 4 - each described in detail below.

Data controller

The data controller for this website is:

Igewale Victor
contact@tooleux.com
Lagos, Nigeria

What we do not collect

The following are explicitly not collected, not logged, and not stored anywhere by this site:

  • Files you drop, paste, or otherwise process with any tool.
  • Text you type or paste into any tool.
  • Keys, passwords, tokens, signatures, or any other secret you may handle.
  • Your IP address (except as a byproduct of hosting - see below).
  • Your user agent (except as a byproduct of hosting).
  • Advertising or identification cookies.
  • Account information, because there are no accounts.
  • Email addresses, because there is no mailing list.
  • Payment information, because there is nothing to pay for.

Hosting provider logs

This site is served by Cloudflare Pages. As with every web host, Cloudflare's edge servers record basic request information when your browser requests a page: the requesting IP address, the user agent, the timestamp, and the requested URL. This is standard and unavoidable for any website.

Cloudflare's handling of this data is described in Cloudflare's own privacy policy, available at cloudflare.com/privacypolicy. The author of this site does not have access to those logs.

Analytics

The site uses Google Analytics 4 (GA4) to measure page views and understand which tools are used. GA4 is loaded from Google's servers and sets two cookies on your device: _ga and _gid.

GA4 collects: the page you visited, the referring page, an approximate location derived from your IP address (not stored as a precise address), your browser and device type, and interaction events such as tool runs. It does not receive the content of any tool input. Nothing you type into a tool or drop into a file area is transmitted to Google.

You can opt out of GA4 tracking by installing Google's official opt-out browser add-on, or by using any content blocker that blocks googletagmanager.com.

Local storage on your device

Some features store preferences on your own device using localStorage, a browser API. This data never leaves your browser and is never transmitted to any server. The preferences stored are:

  • Theme choice - whether you have selected the light or dark theme.
  • Remember Input toggle - per-tool, only if you explicitly enable it. Stores the last value you entered so it is restored on your next visit.

You can clear this at any time by clearing your browser's site data for this domain. There is no server-side copy.

Fonts

The site uses two fonts - Inter and JetBrains Mono - served from this domain. They are self-hosted; no third-party font service is contacted when a page loads.

Cookies

This site does not set any first-party cookies. Third-party services do, as described below.

Analytics cookies. Google Analytics 4 sets _ga and _gid to distinguish visitors and sessions. These cookies are used only to count page views and understand which tools are used; they are not used to identify you personally.

If you are in the European Economic Area, the United Kingdom, or Switzerland, a consent prompt is shown before any of these cookies are set.

Third-party services

The following third-party services are used. Each is subject to its own privacy policy:

No tag manager, customer-support widget, or social media embed is loaded.

Some pages contain links to external sites (for example, links to NIST publications or RFC documents). Those are ordinary hyperlinks; clicking one leaves this site and is subject to the destination's privacy policy.

Children's privacy

This site is not directed at children under the age of 13 and does not knowingly collect personal information from anyone, including children.

Your rights

Because this site does not collect personal information about you, there is no data to access, correct, export, or delete. If you believe the site has stored information about you, please contact us and we will investigate.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or its UK equivalent applies. If you are a California resident, the California Consumer Privacy Act (CCPA) applies. In both cases, the practical response is the same: there is no personal data to exercise rights over. The only entity that may have collected standard request logs is Cloudflare, and their privacy policy governs those.

Under the Nigeria Data Protection Act (NDPA) and its regulations, you also have rights as a data subject. Again, because this site does not collect personal data, there is nothing to exercise those rights over. Standard hosting logs are governed by Cloudflare's own policy.

Changes to this policy

If this policy changes - for example, if a feature is added that collects data - the "last updated" date below will change. Continued use of the site after a change constitutes acceptance of the updated policy.

Contact

Questions about this policy can be sent to contact@tooleux.com.

Last updated: 2026-10-11