Privacy Policy

1. Who we are and what this policy covers

ToolWorld Online is operated by CodeCraft Advisory LLC ("we", "us" or "our"). This policy applies to www.toolworldonline.com and its associated tool pages. It explains how information is handled when you browse the website, use its free online tools, change preferences or contact us. CodeCraft Advisory LLC determines the purposes and means of the personal-information processing described here where it acts as the responsible operator or controller under applicable law.

For privacy questions or requests, contact privacy@toolworldonline.com. For general legal matters, use legal@toolworldonline.com. This notice describes our data practices; it does not treat your use of the website as consent to every possible form of processing. Where consent is required, it must be obtained for the relevant activity.

2. A quick overview of information flows

3. Browser-based processing and your files

For browser-based tools, selected files and pasted content are processed by code running on your device. Choosing an image, PDF, CSV, JSON, YAML, text file or invoice draft does not itself upload that file to ToolWorld Online. Generated passwords, keys, hashes, tokens, palettes and other local results are not intentionally transmitted by the tool application to our servers.

Inputs and results remain available in the open page while you work. Reloading or closing the page normally ends that active workspace, but browser form restoration, extensions, operating-system features or device backups may retain information outside our control. Downloaded files, exported invoice drafts and copied clipboard contents remain wherever your device or other applications store them. We do not offer an account-based backup or recovery service for those files.

Some operations download a third-party JavaScript library before processing. The download provider receives ordinary connection information, as described below. The application does not deliberately include your tool input in that library request. Local processing reduces server-side disclosure; it is not a guarantee against compromised devices, malicious extensions, software vulnerabilities or supply-chain risks.

4. Network lookup information

When you run an IP lookup, we send the requested IP address to the IP lookup service at ipwho.is. If you leave the field blank and request your own public IP, our endpoint uses the connecting IP supplied by our delivery infrastructure. We do not request your device GPS location. Returned country, region, city, coordinates, network and timezone information is inferred from an IP address and may describe an ISP, proxy or VPN rather than an individual.

DNS queries send the domain and chosen record type to Cloudflare DNS-over-HTTPS. Domain registration queries use RDAP discovery and may be redirected to the responsible registry or registrar. Returned registration information may include public contact records or redacted information. A lookup is not anonymous to all involved providers, and submitted domains or IPs may appear in request URLs and technical logs.

Successful lookup responses are configured for an application-level edge cache of approximately five minutes and may be evicted sooner. Lookup endpoints also apply short-window rate limiting using the connecting IP. Cache expiry is not a promise that all infrastructure or provider logs are deleted after five minutes.

5. Technical information from website visits

Website delivery and protection involve processing technical request information. This can include an IP address, requested URL or path and query string, request time, response status, browser or user-agent information, referrer information where supplied, and security or diagnostic events. Infrastructure tools may provide us with traffic statistics and operational records derived from those requests.

We use such information to deliver pages, diagnose failures, limit abuse, maintain availability and investigate security issues. The current application does not contain a separate advertising tracker, third-party marketing analytics integration or session-replay feature. This does not mean that website delivery produces no logs or operational statistics. Please avoid placing confidential information into page URLs or lookup requests.

6. Local storage, cookies and similar technologies

The application stores your chosen favorites under tw-favorites and your theme preference under tw-theme in browser local storage. These values remain on that browser until you change or clear them, or the browser removes them. They do not contain your pasted tool content or uploaded-file contents, and the application does not deliberately synchronize them to a server.

The current application does not itself set advertising or analytics cookies. Delivery or security services may set essential cookies when relevant protection features are active. Browser caches also store website assets. See our Cookies & Local Storage Policy for the distinction between these technologies and instructions for controlling them.

7. Information you send by email

If you contact support@toolworldonline.com, privacy@toolworldonline.com, legal@toolworldonline.com or info@toolworldonline.com, we receive the information you choose to send. This may include your name, email address, message content, attachments, issue details and correspondence timestamps. We use it to respond, troubleshoot, handle rights requests, resolve disputes or address the specific matter raised.

Do not send passwords, private cryptographic keys, live authentication tokens, identity documents, payment card details or sensitive client files unless genuinely necessary and an appropriate handling method has first been agreed. A small redacted example is usually enough for troubleshooting. Using an email link opens your email application; it does not send a message until you choose to send it.

8. Purposes and legal bases where applicable

• Delivering requested pages and tool functions, including network lookups you initiate.
• Remembering preferences that you choose, where permitted by applicable storage rules.
• Maintaining service reliability, preventing misuse and protecting systems and users.
• Answering support, privacy, legal and general inquiries.
• Complying with applicable obligations and establishing, exercising or defending legal claims.

Where applicable law requires a legal basis, the basis depends on the activity: performing a requested service or taking steps at your request; legitimate interests in secure and reliable operation and correspondence, subject to applicable balancing requirements; compliance with legal obligations; or consent where legally required. You may ask us which basis applies to a particular processing activity. We do not use your local tool inputs to build advertising profiles or train an AI model through this application.

9. Service providers and other disclosures

We do not sell personal information or share it for cross-context behavioral advertising through the current service. We do not grant a general right to third parties to use private support correspondence for their own marketing. Provider retention, security measures and independent legal responsibilities are governed by their services and applicable law. External policies may change.

10. How long information is kept

Local tool inputs are not intentionally retained in an application database on our servers. Browser preferences remain until removed or changed in your browser. Exports and clipboard data remain under your control. Application lookup responses use the short cache described above.

Email correspondence and related records are kept while needed to handle the matter and, where justified, to meet legal obligations, maintain necessary security records, resolve disputes or protect legal rights. Relevant factors include the nature of the request, whether an issue remains unresolved, applicable legal periods and any continuing obligation. We do not state a single fixed retention period for all email, infrastructure and provider records. Contact us for information about a specific category or to request deletion where applicable.

Infrastructure and lookup providers may retain their own request, security or diagnostic records for periods set by their policies and configurations. We cannot retrieve or erase a file that was processed only in your browser and never received by us.

11. International processing

Our website, content-delivery network, lookup services and email systems may process information in countries other than the country where you are located. The exact locations depend on the provider and network routing. Laws and available protections can differ between countries.

Where a transfer by us is subject to legal restrictions, applicable safeguards or a lawful transfer mechanism must be used as required. This statement does not claim that all information stays in one country or that visiting the website alone provides blanket transfer consent. You may contact us about the providers and transfer arrangements relevant to information we hold.

12. Security and your responsibilities

We use measures such as HTTPS delivery, browser-side processing for local tools, request validation, restricted lookup endpoints and rate limiting to reduce avoidable risks. Access to correspondence should be limited to those who need it for the relevant purpose. No website, browser environment, email channel or storage system can be guaranteed completely secure.

Use a trusted, up-to-date device and browser. Keep exported private keys, tokens, invoice details and other sensitive results secure. Be mindful of shared computers, browser extensions, clipboard managers and automatic backups. If you suspect a security or privacy issue, contact us with a minimal description and do not publicly disclose exploitable details or private user data.

13. Your rights, choices and complaints

Depending on the law applicable to you and the processing involved, you may have rights to request access, correction, deletion, restriction or portability of personal information; object to certain processing; withdraw consent for consent-based processing; and complain to a relevant data-protection authority. Rights are subject to applicable conditions and exemptions. Withdrawing consent does not undo processing that was lawful before withdrawal.

Send requests to privacy@toolworldonline.com with enough detail to identify the matter, such as the address used to contact us and an approximate correspondence date. We may request proportionate information to verify identity or authority. Do not send an identity document unless we explain why it is needed and agree an appropriate method. We respond within the time required by applicable law and explain relevant limitations or lawful refusals.

For content held only on your device, use your browser or device controls. We cannot locate a private file from a tool session we never received. Where applicable, authorized representatives may contact us with evidence of authority. We do not condition the basic exercise of privacy rights on buying a service.

14. Children and general-audience use

ToolWorld Online is a general-audience utility website and is not designed to collect personal information from children under 13, or a higher age where applicable law requires it. We do not knowingly invite children to send personal information by email. A parent or guardian who believes that a child has sent us personal information should contact privacy@toolworldonline.com so we can assess and address the matter under applicable law. Do not include unnecessary sensitive information about the child in the initial request.

15. Automated processing and browser signals

Tools automatically transform, analyze or format the inputs you supply. Those functions do not make employment, credit, insurance, healthcare or similarly significant eligibility decisions about you. Security controls may automatically limit requests to protect availability.

The current application does not change tool behavior in response to Do Not Track or Global Privacy Control browser signals. It also does not enable advertising profiles, sale of personal information or cross-context behavioral advertising. If data practices change, relevant disclosures, choices and legally required signal handling must be updated accordingly.

16. Policy updates and contact

We may update this policy when the service, providers or applicable requirements change. The date at the top identifies the current published version. Material changes will be communicated through an appropriate notice where required. Changes do not remove rights that applicable law gives you.

Privacy and data requests: privacy@toolworldonline.com. Legal notices: legal@toolworldonline.com. Technical help: support@toolworldonline.com. General inquiries: info@toolworldonline.com.