Privacy Policy

This Privacy Policy explains what information TooLab.io collects, how we use it and what rights you have. TooLab.io ("we", "us") is responsible for the information described here. Our contact details are in section 12. It applies together with our Terms of Use and Cookie Policy.

1. Information that stays on your device

When you run a test, your browser gives the test access to things like key presses, mouse movement, touch, camera video, microphone sound, screen details and game controller input. This is processed in your browser only, to show you the result. It is not sent to our servers or to anyone else.

Photos and recordings you make in a test stay in your browser until you close it, unless you choose to save them to your device. Some tools remember things in your browser so you can come back to them, such as Wi-Fi Map measurements, the VPN Leak Test baseline or recent colors in the Color Picker; this also stays on your device. The system and browser details shown in System Info and Browser Info are read by your browser and shown to you; we do not store them, apart from the general statistics described below.

2. Information we collect

Usage statistics

We use Google Analytics to understand how the Site is used: which pages and tests are opened, approximate location (country or city), device and browser type, screen size, language, the site that referred you, and how long you stay. Google Analytics uses cookies and an identifier stored in your browser. It runs for every visitor, and the cookie notice tells you about it when you first arrive. We have told Google Analytics not to use this data for advertising or ad personalization. Google Analytics 4 does not log or store IP addresses.

Tool and article counters

We count how many times each tool is opened each day, whether it was opened on the desktop or on its own page, and how many times each article is read. These are totals only: they do not say who opened what, and bots are not counted. To stop abuse, the server checks your IP address against a short limit kept in its memory; the address is not saved with the counters.

Technical data

Like most websites, our servers and hosting provider receive your IP address, browser details and the pages you request, and keep them in logs for security and troubleshooting. The Site is delivered through Cloudflare, which also receives this information to deliver pages quickly and protect the Site from attacks, and tells our server which country your visit comes from.

The desktop and the VPN Leak Test show you your own public IP address. To find both your IPv4 and IPv6 addresses, your browser also asks ipify (api.ipify.org), and the VPN Leak Test asks public STUN servers run by Google and Cloudflare. These services see your IP address when your browser contacts them. We do not store the address you are shown.

Account information

You can sign in with your Google account. Google then gives us your name, email address, profile picture and Google account ID, and we save them together with the date you joined and the last time you signed in. We never see your Google password, and we do not ask Google for access to anything else, such as your contacts, files or emails. Your profile picture is loaded from Google's servers. When you sign in, we set a cookie that keeps you signed in for up to a year, or until you sign out.

Messages

If you use the contact form, it sends us an email with your name, email address, topic and message. To fight spam, the email also includes your IP address, the country it comes from and your browser details. If you email us directly, we receive what you send. We keep these emails in our mailbox so we can reply and follow up.

Preferences

Your language, theme, wallpaper, icon layout and tool settings are saved in your browser's local storage, not on our servers.

Do you have to give us information?

No. You don't have to give us any personal information, and every test works without an account. If you don't sign in, you can't use the dashboard. If you don't give an email address in the contact form, we can't answer you. Statistics and technical data are collected automatically while you use the Site, as described above.

3. How we use information

• to provide the Site and your account, and to keep you signed in;
• to keep the Site secure and prevent abuse;
• to see which tools, pages and articles are used, and to improve the Site;
• to answer your messages, and to write to you about your account when needed;
• to meet legal obligations.

We never use test data such as camera, microphone or keyboard input for any of these purposes, because we never receive it.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you (accounts), our legitimate interests (security, statistics and improving the Site), legal obligations, and your consent where the law requires it.

4. Cookies

We use cookies and similar browser storage for sign-in, security, preferences and statistics. Sign-in, security and preference cookies are needed for the Site to work. Google Analytics runs for every visitor, and the Site has no setting to turn it off; you can block it in your browser as explained in section 9. The Cookie Policy lists them and explains how long they last.

5. Sharing

We do not sell or rent your personal information. We share it only with:

• service providers that work for us, and only for that work: our hosting provider and Cloudflare (delivering and protecting the Site), Google LLC (sign-in and statistics) and our email provider (contact form messages);
• authorities or others when the law requires it, or to protect rights, property and safety;
• a buyer or successor if the Site or our business is transferred, who must respect this policy.

Google's use of data is described in How Google uses information from sites that use its services.

6. International transfers

Our service providers may process information outside the country where you live, including in the United States and the European Union. Where the law requires it, we rely on suitable safeguards, such as standard contractual clauses.

7. How long we keep information

• Account information: while your account is open. You can ask us to close it at any time, and we delete the information within 30 days after it is closed, unless the law requires us to keep it longer.
• Server logs: up to 90 days.
• Google Analytics data: up to 14 months.
• Contact form emails and other messages: as long as needed to handle your request and any follow-up.
• Tool and article counters: kept as totals, which hold no personal information.
• IP addresses used to stop abuse: kept only in the server's memory for a short time, never saved.

Information saved in your browser, such as your preferences, stays there until you clear it.

8. Security

We use reasonable measures to protect information, such as encrypted connections (HTTPS), sign-in through Google so that we never hold a password, and access to our systems limited to the people who run the Site. No method of sending or storing data is completely secure, so we cannot guarantee absolute security.

9. Your rights

Depending on where you live, including under the Israeli Protection of Privacy Law and, for people in the European Economic Area and the United Kingdom, the GDPR, you may have the right to access, correct or delete your personal information, to object to or restrict some uses of it, and to receive a copy of it. To use any of these rights, email info@toolab.io. We may need to confirm your identity first.

We answer requests within 30 days. If we can't do what you ask, for example because the law requires us to keep some information, we will tell you why.

You can also complain to your local data protection authority. In Israel this is the Privacy Protection Authority.

If you signed in with Google, you can also remove TooLab.io's access in your Google Account, under connections to third-party apps and services.

You can delete cookies in your browser settings. Google offers a browser add-on that turns off Google Analytics on all websites.

10. Children

The Site is not meant for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us at info@toolab.io and we will delete it.

11. Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top shows when it last changed. If a change is significant, we will make reasonable efforts to let you know, for example with a notice on the Site.

12. Contact

The Site is run by TooLab.io, Israel, which is responsible for the information described in this policy.

Questions or requests about your privacy: info@toolab.io.