Skip to main content

Privacy Policy

Last updated: June 8, 2026

Data Controller

The data controller responsible for your personal data is:

FreeToolBoxKit

Operated by: Aniket Babar

Location: München, Bayern, Germany

Contact: contact@freetoolboxkit.com

For data protection inquiries or to exercise your rights, please use our contact form.

1. Information We Collect

FreeToolBoxKit is designed with privacy as a core principle. All tools process data entirely in your browser — your files and text never leave your device or reach our servers.

  • Tool Usage Data: Anonymous, aggregated statistics about which tools are used (no personally identifiable information).
  • Cookies & Local Storage: We store your cookie consent preference locally on your device. With your consent, third-party cookies may be set for analytics and advertising.
  • Analytics: With your consent, anonymized analytics data (pages visited, browser type, country) is collected via Google Analytics.
  • Contact Form: If you contact us, we receive your name, email address, and message content solely to respond to your inquiry.

2. Legal Basis for Processing (GDPR Article 6)

Consent (Art. 6(1)(a))

Analytics cookies, advertising cookies, personalized ads. You can withdraw consent at any time via the cookie banner.

Legitimate Interest (Art. 6(1)(f))

Anonymous tool usage statistics to improve the service. No personal data is involved.

Contract Performance (Art. 6(1)(b))

Processing contact form submissions to respond to your inquiry.

3. Cookies & Local Storage

We use browser localStorage (not traditional cookies) to store your consent preference. Third-party services may set cookies on your device only after you give consent.

Strictly NecessaryAlways active

Stores your cookie consent choice (ftbk_cookie_consent). Always active.

FunctionalOff by default

Remembers theme preference (ftbk_theme). Off by default.

AnalyticsOff by default

Google Analytics (_ga, _gid, _gat). Anonymized. Off by default.

AdvertisingOff by default

Google AdSense (NID, IDE, ANID, CONSENT). Off by default.

See our full Cookie Policy for detailed information on specific cookies and retention periods.

4. Third-Party Services

Google AdSense

We display advertisements via Google AdSense (publisher ID: ca-pub-9100209280220037). With your consent, Google may use cookies (NID, IDE, ANID, DSID, CONSENT) to serve personalized ads based on your browsing history. Google's privacy policy: policies.google.com/privacy. To opt out of personalized ads: adssettings.google.com

Google Analytics

With your consent, we use Google Analytics to understand site traffic. Google may set _ga, _gid, _gat cookies. Data is anonymized (IP anonymization enabled). To opt out: tools.google.com/dlpage/gaoptout

Vercel (Hosting)

Our website is hosted on Vercel. Vercel may collect standard server logs (IP address, user agent, request path) for security and performance. Vercel's privacy policy: vercel.com/legal/privacy-policy

5. Data Retention

Cookie consent preferenceUntil you clear browser storage or withdraw consent
Contact form submissionsUp to 12 months, then deleted
Google Analytics data26 months (Google's default retention)
Google AdSense cookiesUp to 13 months (per Google's policy)
Server logs (Vercel)Up to 30 days

6. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

  • Access — Request a copy of personal data we hold about you
  • Rectification — Correct inaccurate data
  • Erasure — Request deletion of your data ("right to be forgotten")
  • Restriction — Limit how we process your data
  • Portability — Receive your data in a machine-readable format
  • Object — Object to processing based on legitimate interest
  • Withdraw consent — Withdraw cookie consent at any time via the cookie banner

To exercise these rights, contact us via our contact form. We will respond within 30 days as required by GDPR.

7. Right to Lodge a Complaint

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Germany, the relevant authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18, 91522 Ansbach, Germany

Website: lda.bayern.de

If you are located in another EU country, you may also contact your local data protection authority.

8. Data Security

We implement appropriate technical and organisational measures to protect your data. All tool processing happens client-side in your browser — files, text, and documents you process in our tools are never transmitted to any server. Our website is served over HTTPS (TLS encryption).

In the event of a personal data breach that affects your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33, and notify affected individuals without undue delay where required by Article 34.

9. Children's Privacy

Our service is not directed to children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under CCPA and CPRA:

  • Right to Know — Request disclosure of what personal information we collect, use, disclose, or sell
  • Right to Delete — Request deletion of your personal information
  • Right to Opt-Out — Opt out of the sale or sharing of your personal information
  • Right to Correct — Correct inaccurate personal information (CPRA)
  • Right to Limit — Limit use of sensitive personal information (CPRA)
  • Right to Non-Discrimination — We will not discriminate against you for exercising these rights

We do not sell personal information for monetary consideration. However, sharing data with Google AdSense for advertising purposes may be considered "sharing" under CCPA.

Do Not Sell or Share My Personal Information

California residents can opt out of the sale or sharing of their personal information. We do not sell personal information for monetary consideration, but third-party advertising networks may be considered "sharing" under CCPA.

11. Global Privacy Control (GPC)

We respect the Global Privacy Control (GPC) signal. If your browser has GPC enabled, we treat this as an opt-out of the sale or sharing of your personal information, consistent with California law. You can enable GPC in privacy-focused browsers or extensions.

12. Changes to This Policy

We may update this Privacy Policy when our practices change or when required by law. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will re-display the cookie consent banner to obtain fresh consent where required.

Questions? Contact us via our contact form.