Privacy Policy
Last updated: 2026-05-11
Toolstack respects your privacy. This document explains what data we process and why.
What we collect
Most Toolstack tools run entirely in your browser — your files never leave your device. We never receive or store your images, videos, audio, or any content you process with the tools.
When you create an account or use server-side features, we collect:
- Your email address (for sign-in)
- Your display name and locale preference
- OAuth provider IDs if you sign in with Google or GitHub
- Subscription status from myPOS (no card data — myPOS handles that)
- Anonymous usage events (tool slug, country, success/fail) — no file contents
What we don't collect
- The files you process
- Cookies (apart from the auth session cookie and language preference)
- Third-party tracking
Where it's stored
Our database is Neon Postgres in the EU. Sessions are HTTP-only cookies on your device. Analytics is Plausible — privacy-friendly and GDPR-compliant.
Your rights
You can delete your account at any time from the account page. We'll erase all your data within 30 days. Contact privacy@toolstack.moj-server.net for any GDPR request.
Changes
If we change this policy materially, we'll email registered users.
This is a placeholder document. Have your legal team review before launch.