GDPR Compliance

What data we process

Toolkiya processes almost no personal data by design. Every tool runs in your browser — files, text, and images are processed locally and never uploaded to our servers.

The only data we process:

• IP address— used only for rate limiting API calls and shown to you (never stored) in the "What's My IP" tool.
• Anonymous feedback — when you submit feedback, we store the rating, comment, and a device ID (not tied to any personal info).
• Feature requests — stored with only your optional email if you want updates.
• Waitlist emails — stored if you explicitly opt into the Android app waitlist.

Lawful basis

We rely on legitimate interests (GDPR Article 6(1)(f)) for running the website and rate limiting, and on consent (Article 6(1)(a)) for optional emails (waitlist, feature requests).

Your rights under GDPR

As an EU/EEA resident, you have the right to:

• Access — request what data we hold about you
• Rectification — correct inaccurate data
• Erasure — the right to be forgotten
• Portability — receive your data in a machine-readable format
• Object — to processing based on legitimate interests
• Restriction — ask us to pause processing
• Withdraw consent — at any time, for any consent-based processing

How to exercise your rights

Email privacy@toolkiya.comwith your request. We'll respond within 30 days. If you submitted feedback with a device ID, we can delete it by device ID.

Data retention

We keep anonymous feedback indefinitely to improve tools. We keep waitlist emails only until the feature ships, then delete. We never sell, rent, or share data with third parties.

International transfers

Toolkiya is hosted on Vercel, which uses edge infrastructure worldwide. For EU users, data may be processed in Vercel's Frankfurt or Dublin regions. Our database (Supabase) supports EU regions.

Data Protection Officer

For data protection inquiries: privacy@toolkiya.com.

Supervisory authority

You have the right to lodge a complaint with your local EU supervisory authority if you believe we're handling your data incorrectly.