Privacy Policy

1. Data controller

The data controller is Agostino Grieco, a natural person, reachable at [email protected].

2. What data we collect

Toolopoli's tools require no sign-up and never send your files, images or text to a server: all processing happens locally in your browser. The only personal data that reaches us is what you choose to send: a message written with the message form and a newsletter sign-up.

For technical and security reasons, browsing data collected by our hosting provider (Cloudflare), such as IP address, browser type and pages visited, is processed in aggregate form to prevent abuse.

3. Messages you send us

At the bottom of the tool pages and on the Contact page there is a form to report a problem or suggest an idea. Unlike the tools, that form sends what you write: the type of message, the text, the page you are writing from, the language and the date, plus your email if you choose to leave it (it is optional and only used to reply to you). Please do not include other personal data in the text.

Messages are stored in the site's database at Cloudflare, with the data kept in the European Union, and only the data controller reads them. When a new one arrives, the controller receives a notification email that contains neither the text nor your address.

We do not store your IP address. To stop automated floods of messages we use, for 24 hours, a fingerprint derived from the address that cannot be traced back to it, and then we delete it.

Messages are deleted after 12 months, and the sender's email after 90 days. The database's technical backups disappear at the latest 7 days after deletion.

4. The newsletter

If you subscribe to the newsletter, your email and the language you want to receive it in are handled by Brevo (Sendinblue SAS, France), which processes them on our behalf as a data processor. The form on this site sends your email straight from your browser to Brevo, and you confirm with one click in the email you receive: without that confirmation we do not write to you.

To stop automated sign-ups, the form uses Cloudflare Turnstile, an anti-bot check that only loads when you start typing your email and receives some technical data about your browser and device to tell whether a person is signing up.

We only write about what is new on Toolopoli. Every email contains a one-click unsubscribe link, and your email is kept for as long as you stay subscribed.

5. Browser local storage

Some tools and settings save data only on your device using your browser's local storage: for example your chosen language, your cookie choice, and data from certain tools (notepad, lists, histories, game records). This data is never transmitted and you can delete it by clearing the site data in your browser.

6. Cookies and third-party services

Toolopoli uses or may use the following third-party services. Where they set cookies on your device, it is stated below:

Google AdSense. To display advertising that supports the site. Google may use cookies to serve ads based on your visits, including personalized ads. You can manage your ad preferences from Google Ad Settings.

Amazon Affiliate Program. Some pages contain links to products on Amazon. If you click and buy, Amazon may use cookies to attribute the purchase, at no extra cost to you.

Cloudflare Web Analytics. The site is hosted on Cloudflare, which adds a statistics script of its own (static.cloudflareinsights.com) to every page it serves: it is not written in the site's code. It uses no cookies and does not follow you from site to site: it counts visits in aggregate, to know which tools are actually useful.

For details and to manage consent, see the Cookie Policy.

7. Legal basis

Technical and local-storage cookies rely on the legitimate interest of providing the service. Advertising profiling cookies (e.g. AdSense) rely on your consent, which you can give or refuse via the banner and withdraw at any time. Messages sent with the form rely on the legitimate interest of replying to those who write to us and improving the site. The newsletter sign-up relies on your consent, which you can withdraw at any time.

8. Your rights

Under the EU GDPR you have the right to access your data, request correction or deletion, restrict or object to processing and withdraw consent. To exercise these rights, email [email protected]. You can ask at any time for a message you sent us to be deleted. You also have the right to data portability and to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

9. Transfers and minors

Third-party services (Google, Amazon, Cloudflare) may process data outside the European Union with appropriate safeguards. The site is not intended for children under 14. The message database is kept in the European Union.

10. Changes

This policy may be updated over time. The date above shows the latest revision.