Privacy Policy

Toolstack respects your privacy. This document explains what data we process and why.

What we collect

Most Toolstack tools run entirely in your browser — your files never leave your device. We never receive or store your images, videos, audio, or any content you process with the tools.

When you create an account or use server-side features, we collect:

• Your email address (for sign-in)
• Your display name and locale preference
• OAuth provider IDs if you sign in with Google or GitHub
• Subscription status from myPOS (no card data — myPOS handles that)
• Anonymous usage events (tool slug, country, success/fail) — no file contents

What we don't collect

• The files you process
• Cookies (apart from the auth session cookie and language preference)
• Third-party tracking

Where it's stored

Our database is Neon Postgres in the EU. Sessions are HTTP-only cookies on your device. Analytics is Plausible — privacy-friendly and GDPR-compliant.

Your rights

You can delete your account at any time from the account page. We'll erase all your data within 30 days. Contact privacy@toolstack.moj-server.net for any GDPR request.

Changes

If we change this policy materially, we'll email registered users.