Privacy Policy
Last updated: June 8, 2026
Data Controller
The data controller responsible for your personal data is:
FreeToolBoxKit
Operated by: Aniket Babar
Location: München, Bayern, Germany
Contact: contact@freetoolboxkit.com
For data protection inquiries or to exercise your rights, please use our contact form.
1. Information We Collect
FreeToolBoxKit is designed with privacy as a core principle. All tools process data entirely in your browser — your files and text never leave your device or reach our servers.
- Tool Usage Data: Anonymous, aggregated statistics about which tools are used (no personally identifiable information).
- Cookies & Local Storage: We store your cookie consent preference locally on your device. With your consent, third-party cookies may be set for analytics and advertising.
- Analytics: With your consent, anonymized analytics data (pages visited, browser type, country) is collected via Google Analytics.
- Contact Form: If you contact us, we receive your name, email address, and message content solely to respond to your inquiry.
2. Legal Basis for Processing (GDPR Article 6)
Consent (Art. 6(1)(a))
Analytics cookies, advertising cookies, personalized ads. You can withdraw consent at any time via the cookie banner.
Legitimate Interest (Art. 6(1)(f))
Anonymous tool usage statistics to improve the service. No personal data is involved.
Contract Performance (Art. 6(1)(b))
Processing contact form submissions to respond to your inquiry.
3. Cookies & Local Storage
We use browser localStorage (not traditional cookies) to store your consent preference. Third-party services may set cookies on your device only after you give consent.
Stores your cookie consent choice (ftbk_cookie_consent). Always active.
Remembers theme preference (ftbk_theme). Off by default.
Google Analytics (_ga, _gid, _gat). Anonymized. Off by default.
Google AdSense (NID, IDE, ANID, CONSENT). Off by default.
See our full Cookie Policy for detailed information on specific cookies and retention periods.
4. Third-Party Services
Google AdSense
We display advertisements via Google AdSense (publisher ID: ca-pub-9100209280220037). With your consent, Google may use cookies (NID, IDE, ANID, DSID, CONSENT) to serve personalized ads based on your browsing history. Google's privacy policy: policies.google.com/privacy. To opt out of personalized ads: adssettings.google.com
Google Analytics
With your consent, we use Google Analytics to understand site traffic. Google may set _ga, _gid, _gat cookies. Data is anonymized (IP anonymization enabled). To opt out: tools.google.com/dlpage/gaoptout
Vercel (Hosting)
Our website is hosted on Vercel. Vercel may collect standard server logs (IP address, user agent, request path) for security and performance. Vercel's privacy policy: vercel.com/legal/privacy-policy
5. Data Retention
6. Your Rights
Under GDPR and applicable privacy laws, you have the right to:
- Access — Request a copy of personal data we hold about you
- Rectification — Correct inaccurate data
- Erasure — Request deletion of your data ("right to be forgotten")
- Restriction — Limit how we process your data
- Portability — Receive your data in a machine-readable format
- Object — Object to processing based on legitimate interest
- Withdraw consent — Withdraw cookie consent at any time via the cookie banner
To exercise these rights, contact us via our contact form. We will respond within 30 days as required by GDPR.
7. Right to Lodge a Complaint
If you believe we are processing your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Germany, the relevant authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Website: lda.bayern.de
If you are located in another EU country, you may also contact your local data protection authority.
8. Data Security
We implement appropriate technical and organisational measures to protect your data. All tool processing happens client-side in your browser — files, text, and documents you process in our tools are never transmitted to any server. Our website is served over HTTPS (TLS encryption).
In the event of a personal data breach that affects your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33, and notify affected individuals without undue delay where required by Article 34.
9. Children's Privacy
Our service is not directed to children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under CCPA and CPRA:
- Right to Know — Request disclosure of what personal information we collect, use, disclose, or sell
- Right to Delete — Request deletion of your personal information
- Right to Opt-Out — Opt out of the sale or sharing of your personal information
- Right to Correct — Correct inaccurate personal information (CPRA)
- Right to Limit — Limit use of sensitive personal information (CPRA)
- Right to Non-Discrimination — We will not discriminate against you for exercising these rights
We do not sell personal information for monetary consideration. However, sharing data with Google AdSense for advertising purposes may be considered "sharing" under CCPA.
Do Not Sell or Share My Personal Information
California residents can opt out of the sale or sharing of their personal information. We do not sell personal information for monetary consideration, but third-party advertising networks may be considered "sharing" under CCPA.
11. Global Privacy Control (GPC)
We respect the Global Privacy Control (GPC) signal. If your browser has GPC enabled, we treat this as an opt-out of the sale or sharing of your personal information, consistent with California law. You can enable GPC in privacy-focused browsers or extensions.
12. Changes to This Policy
We may update this Privacy Policy when our practices change or when required by law. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will re-display the cookie consent banner to obtain fresh consent where required.
Questions? Contact us via our contact form.