Privacy

How toolit handles data: client-side tools, hosting in Germany, and Google AdSense with consent.

Content

Who we are

toolit is operated from Germany (see our Imprint). The product is developed and run under German law, while the website and tools are offered in English for an international audience.

This notice explains how we process personal data when you use toolit.io and how third-party services we use (hosting, Google AdSense) fit in.

Scope: what runs in your browser

The utilities on this site are designed so that core processing happens locally in your web browser on your device (for example image compression, rotation, or similar features). In those cases, your files and the results of processing are not uploaded to our servers for that core functionality.

You should still assume that normal website delivery (see below) involves our server and infrastructure when you load pages, assets, and scripts.

Data we process when you use the website

Server, hosting, and infrastructure

The site is hosted on servers located in Germany with Netcup (Netcup GmbH). When you request pages or assets, technical data is processed as part of operating the service. This typically includes:

  • IP address
  • date and time of the request
  • requested URL and HTTP status
  • referrer and user agent (browser and device type, in a technical sense)
  • possibly further security and error logs required by the provider

This processing is necessary to deliver the website securely and reliably and to maintain IT security (for example abuse prevention). The legal basis under the GDPR is Article 6(1)(f) GDPR (legitimate interests) and, where applicable, Article 6(1)(b) GDPR (performance of a contract / pre-contractual steps) when you actively use the service.

For details on how Netcup processes data, please refer to Netcup’s privacy information:
https://www.netcup.com/en/kontakt/datenschutzerklaerung

Cookies and similar technologies

We use cookies and local storage where needed to:

  • operate essential functions of the site (for example security and load balancing, cookie consent storage, and session-related settings), and
  • optionally enable analytics and marketing/advertising, depending on your choices.

Non-essential cookies (including those used for Google AdSense and, where applicable, analytics) are only activated after you give consent in our cookie banner, where required by law. You can change or withdraw your choices at any time via the banner or your browser settings.

We use Google Consent Mode to align ad and analytics tags with your consent choices. Until you consent, related storage may remain restricted or denied.

Google AdSense (advertising)

We use Google AdSense to show advertisements on some pages. Google may process data such as:

  • ad identifiers and cookie identifiers
  • device and browser information
  • approximate location and usage data related to ad delivery and measurement

Google may process this data on servers in the European Union and the United States and elsewhere. Where data is transferred to the United States, Google relies on appropriate safeguards such as standard contractual clauses and supplementary measures under the GDPR.

Legal basis: where consent is required, Article 6(1)(a) GDPR (consent). Where Google relies on legitimate interests for specific activities, Google will describe this in its policies.

Further information:

You can also use industry tools such as Your Online Choices (EU) to manage certain advertising preferences.

Google Analytics (web analytics)

We use Google Analytics 4 (GA4) via Google Tag / gtag.js to understand how the site is used (for example pages viewed and approximate usage patterns). GA4 is provided by Google Ireland Limited (for users in the EEA/UK) and may involve processing on Google’s global infrastructure, including the United States, with appropriate safeguards (such as standard contractual clauses) where required.

Analytics storage is disabled by default in line with Google Consent Mode: measurement only receives analytics consent after you allow it in the cookie banner (or equivalent choice). Until then, analytics-related storage remains denied.

Legal basis where consent is required: Article 6(1)(a) GDPR (consent). Where applicable, Article 6(1)(f) GDPR (legitimate interests) may apply to aggregated or security-related processing as described by Google.

More information: Google Analytics privacy and Google’s general Privacy Policy.

Recipients and processors

We use service providers (such as hosting with Netcup and Google for AdSense) who process data on our behalf or jointly with us, strictly as needed to provide the service. We choose providers with appropriate safeguards and data processing agreements where required.

Retention

We retain server logs and related technical data only as long as necessary for security, troubleshooting, and legal obligations. Cookie lifetimes depend on the respective cookie and your settings.

Your rights (GDPR)

If the GDPR applies to you, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection where applicable. You also have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You may lodge a complaint with a supervisory authority. In Germany, a list of authorities is available from the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

To exercise your rights, contact us using the details in the Imprint.

Children

This website is not directed at children under 16. We do not knowingly collect personal data from children.

Changes

We may update this privacy policy when our service or legal requirements change. The current version is always the one published on this page.

Controller

The controller responsible for data processing in connection with this website is:

Tom Schindler (see the Imprint for the full address and contact details).