Controller and scope
Barış Can Keskin (ToolsApp) is the controller for the ToolsApp website, mobile app and browser extension. Contact toolsappwebsite@gmail.com. This document covers ToolsApp services; independently linked websites have their own policies.
Browser and server-side processing
Many ToolsApp tools process inputs in your browser. Accounts, payments, the developer API, support and functions requiring online connections use server services. Necessary inputs and request information may be transmitted to those services. Processing methods and file limits depend on the tool; review its description.
Information is collected through forms, sign-in/payment provider notifications, content you publish and technical requests. Accounts, membership, support and order matching are assessed under contract formation/performance; required records under legal obligations; proportionate security and abuse prevention under legitimate interests. Optional analytics relies on consent. Using the service or reading this notice is not itself consent.
Account and payment services
Supabase handles email/password and Google sign-in. Account IDs, email addresses, profile names, selected images and membership information may be processed by the relevant account services. Google profile information is used for account/session purposes; ToolsApp does not sell it or use it for AI training. Lemon Squeezy handles payments; ToolsApp processes order and subscription records to match membership access.
Support, AI and community records
PRO ticket subjects, messages, replies and account-related information are stored on the server and can be viewed by authorized administrators. Messages and limited conversation history sent to the AI assistant may be transmitted to Groq to produce a response. Responses can be wrong; independently verify important information.
Published comments may appear with your profile name/image. YouTube-for-PRO applications process account details, video links, title/channel information, verification codes, review status and reward records on the server. Profile frames, API access and usage quotas also involve server records.
Payment and membership records
Payment is completed through Lemon Squeezy’s sales/payment infrastructure. ToolsApp does not request card numbers or CVV in its payment form. Necessary customer/order/subscription identifiers, registered email, product, payment and membership status are processed to verify access. Monthly/yearly renewals and cancellation requests are managed in the provider’s customer portal.
Browser storage, sessions and preferences
Browser storage may contain theme, accent, favorites, sound and cookie preferences, as well as sessions, profile caches and feature state. Favorites are stored on your device. Cookies or tokens may be used for authentication. Clearing browser data removes local records; server-side account and service records require a separate deletion request.
Optional analytics and technical operation
With accepted cookie preferences, Vercel Web Analytics, Speed Insights, Google Analytics and ToolsApp visitor statistics may run. Page/tool information, device/browser categories, language and a browser-stored visitor identifier may be processed for analytics. Rejecting prevents these optional analytics from starting. Authentication and security/rate-limiting operations may run separately. Rejecting cookies does not disable Monetag advertising on the free plan.
Advertising and preferences
The free plan may show Monetag advertising. Ads are disabled with PRO access. Optional analytics preferences are separate from ad delivery.
Monetag may use IP addresses, device information, identifiers and cookies for advertising measurement and security. Analytics preferences do not disable this third-party advertising processing. Ads are not loaded on privacy or terms pages. Review the provider’s data practices at the link below.
Retention and erasure criteria
Local preferences may remain until browser data is cleared. Account records are assessed against service needs; support/campaign records against request handling, reward verification and disputes; payment records against legal obligations and the protection of rights. There is no single automatic erasure period for every data type. Erasure requests are assessed across relevant service/provider records; legally required records and backups may not be erased simultaneously. Clearing the browser does not erase server records.
Providers and international processing
Services may include Supabase/Google for accounts, Vercel/Google for hosting and optional analytics, Groq for support responses, Lemon Squeezy for payments and Monetag for advertising on free pages. Connected extension services are described below. Providers may use international infrastructure. This notice does not guarantee a particular country, data residency or signed transfer safeguard. Contact the controller about recipients, applicable transfer conditions and requests; provider arrangements and appropriate transfer mechanisms require separate verification.
ToolsApp Workbench 2 — browser extension
Apps and extensions may combine browser-processed tools with connected account/service features. Permissions for the installed version appear during installation. Online features should be considered alongside the web services’ processing practices; offline operation is not guaranteed for every feature.
This section applies to the new Workbench 2 release. Local tools process text and files on your device without automatically uploading them to ToolsApp. The extension does not collect browsing history or cookies and contains no ads or usage analytics. Language, theme, favourites and recent tool identifiers are stored in local extension storage. Tool inputs are not automatically saved persistently. Supported fields transfer temporarily when opening the full workspace; files and sensitive fields must be entered again.
Optional account linking requires signing in on the ToolsApp website and approving a pairing code. ToolsApp verifies your account ID, display name and plan rights. Your website password and website session are not passed to the extension. A separate connection token and signed plan information valid for at most 12 hours are stored in the extension. The server stores a hash rather than the token itself; a connection session lasts at most 30 days. Disconnecting in settings removes local account information and attempts to revoke the server token; an offline revocation request may not arrive. Clearing local data also removes stored extension preferences.
Connected tools explain their purpose and access before use. DNS queries go to Cloudflare DNS, public IP checks to api.ipify.org, and exchange-rate data to open.er-api.com or a JSON data provider via jsDelivr. Domain registration queries are forwarded through ToolsApp to the relevant registry listed by IANA. Remote page preview loads the chosen website and is subject to that site’s resources and data practices. Depending on your browser, speech recognition or synthesis may send audio or text to a browser-provider service. Connected services can see connection data such as your IP address; ToolsApp keeps temporary counters derived from IP addresses to limit abuse. You can revoke permissions in your browser settings.
Your rights and requests
Under KVKK you may ask whether data is processed, request information on purposes/recipients, seek correction or conditional erasure/destruction and recipient notification, object to adverse decisions based solely on automated analysis, and seek compensation for unlawful processing. Where GDPR or other mandatory law applies, rights of access, restriction, objection, portability, consent withdrawal and supervisory complaints remain subject to their conditions. Contact toolsappwebsite@gmail.com; proportionate identity verification may be required. KVKK requests are answered within 30 days and other requests within applicable legal periods. This is not a promise of simultaneous irreversible erasure of every record.
Children and accounts
The service is not specifically directed at children. Accounts and purchases must meet the capacity and parent/guardian permission requirements applicable to your age and country. Parents may contact us about their child’s data. No single age threshold for every jurisdiction/operation or automatic COPPA/GDPR compliance guarantee is asserted.
Changes
This notice may change with the product and processing practices; its date is displayed here. Material changes are communicated appropriately. Updating a notice does not replace consent when a new operation requires it.