Privacy Policy

Privacy Policy

Controller

Toolkit Vault (“we”, “us”, “our”). Contact: [email protected]

1 - What we collect

ToolkitVault's tools run entirely in your browser: your inputs, generated values, and settings are never sent to or stored on our servers. We only collect the minimum needed to run the site and understand how it's used:

  • Usage & diagnostics (only with your consent): pages viewed, referrer, rough location (IP-derived), device/browser, and performance data, via Google Analytics/Tag Manager.
  • Identifiers: a cookie that stores your consent choice and, if you accept analytics, cookies set by Google Analytics.

2 - How we use data

To run and secure the service, measure traffic and performance, debug issues, and improve the tools we build.

3 - Cookies & consent

On your first visit, a cookie banner lets you accept or reject non-essential cookies:

  • Strictly necessary: stores your consent choice. Always on, can't be switched off.
  • Analytics: loads Google Tag Manager/Google Analytics (GA4) only if you accept. Nothing is set until you do.

You can change your choice at any time via the Cookie settings link in the site footer.

4 - Google Analytics (GA4)

When analytics consent is granted, we use GA4 to understand how visitors use the site. Learn how Google uses this data: https://policies.google.com/technologies/partner-sites. You can also opt out browser-wide with the GA opt-out add-on: https://tools.google.com/dlpage/gaoptout.

5 - Legal bases (GDPR)

  • Consent for analytics cookies.
  • Legitimate interests for strictly necessary cookies, service security, and abuse prevention.

Your GDPR rights include access, rectification, erasure, restriction, objection, and data portability. Contact us to exercise these rights.

6 - Data sharing

We share analytics data with Google, only if you've consented. We do not sell personal data and do not use any data for advertising.

7 - Data retention

  • On our servers: we don't store personal data; the tools run client-side.
  • Analytics (GA4): event-level data is retained 2 months by default (configurable up to 14 months). Withdrawing consent stops any new data collection going forward.

8 - Children

Our service is not directed to children under 13. We do not knowingly collect their data.

9 - International transfers

Where analytics data is processed outside your country (including outside the EEA/Switzerland/UK), Google relies on appropriate safeguards such as Standard Contractual Clauses.

10 - Your controls

  • Cookie settings: change your consent choice any time via the link in the site footer.
  • Analytics opt-out: the GA opt-out add-on linked above.

11 - Changes

We may update this policy. Material changes will be noted here, and the “Last updated” date will be revised.