Privacy Policy

Who we are

ToolyDay (toolyday.com) is operated by Dev Team of Toolyday.com. For the limited data described below, the operator is the "controller" under the EU and UK General Data Protection Regulation (GDPR) and the "business" under US state privacy laws such as the California Consumer Privacy Act (CCPA). You can contact us at admin@toolyday.com.

In short

• Your files are processed in your browser on your own device. They are never uploaded to us or to anyone else.
• We have no accounts, no cookies, no advertising and no analytics or tracking tools.
• We do not sell or share personal information.
• You do not have to take our word for it: see "Verify our privacy promise" for tests anyone can run.

Your files and content

Every tool on ToolyDay (PDF and image tools alike) runs inside your web browser. When you choose a file, your browser reads it into its own memory on your device, the tool processes it there, and the result is offered to you as a download. Nothing is sent to our servers or to any third party, so we never receive, see, store or back up your files or their contents, including any text, names, signatures, passwords or metadata they contain.

The processed data disappears when you close or reload the page. Files you download are saved by your browser and operating system in the location you choose; they are then under your control, not ours.

Some tools load helper files from our own website when needed, such as language data for text recognition (OCR) or fonts. These are downloaded to your device; your documents are not sent in return.

Data we process about visits

ToolyDay is delivered through an external hosting provider that supplies our hosting, content delivery and security. When you visit any website, the host necessarily processes technical data to deliver pages and protect against attacks and abuse: typically your IP address, the page requested, date and time, browser and device type, referring page and your approximate country.

When you open the home page, your country (worked out by our hosting provider from your IP address) is used for one purpose only: to send you to the English or the Vietnamese version of the site. We do not store it. We do not access logs of individual visitors; at most we may look at aggregated hosting statistics, such as total requests.

Cookies and similar technologies

ToolyDay does not set cookies and does not use local storage, session storage, fingerprinting or similar technologies to store or read personal information on your device. Because of this, no cookie banner or consent prompt is needed. We do not load scripts, fonts or images from third-party servers; everything comes from toolyday.com.

To make the tools load faster and keep working without a connection, your browser keeps copies of the website’s own program files (code, fonts, language data and pages) in its cache. These copies contain no personal data, are never used to identify or track you, and can be removed at any time in your browser settings.

Why we process data (legal bases)

For the technical data above, our legal basis under the GDPR is our legitimate interest (Article 6(1)(f)) in keeping the website available, secure and free from abuse. We do not rely on consent, because we do not use cookies or tracking, and we do not use your data for profiling or automated decision-making.

Who receives data, and transfers abroad

The only service provider involved is our hosting provider, which acts on our behalf as a processor (a "service provider" under CCPA) for hosting and security. We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not give it to advertisers or data brokers.

Our hosting provider operates worldwide, so technical data may be processed outside your country, including in the United States. Where data leaves the EU, EEA or UK, it relies on safeguards such as the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses. Details are in the provider’s own privacy policy and data processing terms, which we can point you to on request.

We may disclose information if the law requires it, for example in response to a valid legal request.

How long data is kept

We do not keep any personal data about visitors ourselves. Our hosting provider keeps technical logs for the periods set out in its own policies, which are generally short.

Your rights in the EU, EEA and UK

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to lodge a complaint with your local data protection authority.

Because we hold no accounts and no data that identifies you, we usually cannot link a request to a person (Article 11 GDPR). You are still welcome to ask, and we will respond to the extent we can. To use your rights regarding logs held by our hosting provider, you can also contact that provider.

Your rights in the United States

Residents of California and other US states with privacy laws may have the right to know what personal information is collected, to request deletion or correction, and not to be discriminated against for using their rights. We collect only the technical identifiers and internet activity data described above, through our hosting provider and only to operate and secure the site. We do not sell personal information, do not share it for targeted advertising, and do not use or disclose sensitive personal information for purposes that would need an opt-out.

We do not track visitors, so there is nothing to opt out of, and Do Not Track and Global Privacy Control signals are respected by design.

Visitors in other countries

If you use ToolyDay from a country with its own data protection law, we handle personal data in line with the applicable law. You have the rights that law gives you, such as being informed, accessing, correcting and deleting your data and withdrawing consent where consent applies.

Children

ToolyDay is a general-audience tool and is not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 in the EU, or the lower age set by your country). Because we collect no accounts or profiles, this is by design.

Security

The site is served only over HTTPS with HTTP Strict Transport Security, uses a strict Content Security Policy, and loads no third-party code. Because your files never leave your device, the main security measure is that there is nothing on our side to lose. No system is perfectly secure, and you remain responsible for the security of your own device and files.

Changes to this policy

If we change how we handle data, for example by adding analytics or advertising, we will update this policy first, show the new date above and, where the law requires, ask for your consent before anything starts.

Contact

You can contact us at admin@toolyday.com.