Privacy Policy

1. What we collect

GetToolbox does not create user accounts and does not store any personally identifiable information you enter into our tools. Tool inputs (passwords, JSON, Base64, JWT tokens) are processed in your browser and never sent to our servers, except where a server call is necessary (IP lookup, webhook inspection).

We use Google Analytics 4 to collect anonymous usage statistics: pages visited, session duration, and country-level location. IP addresses are anonymized before processing and are not stored by Google Analytics. No cross-site tracking identifiers are shared with third parties.

2. Cookies

This site uses cookies set by Google Analytics 4 for session analytics. No other cookies are set by gettoolbox.dev directly.

Google Analytics 4 sets the following cookies on your device:

You can disable cookies in your browser settings, use a browser extension to block third-party cookies, or opt out of Google Analytics tracking via Google's opt-out browser add-on.

3. IP addresses

The ShowMyIP tool returns geolocation data for the IP address of the requesting client. This IP address is used only to perform the lookup and is not stored in any database or log.

Standard web server logs (Vercel infrastructure) may retain IP addresses for a limited period for security and abuse prevention purposes, as per Vercel's privacy policy.

4. Webhook Inspector

The Webhook Inspector receives HTTP requests sent to a temporary unique endpoint. Request headers, body, and metadata are stored temporarily (maximum 24 hours) to enable real-time inspection. Sessions are identified by a random UUID. No personal data is required to create a session.

5. Contact form

When you submit the contact form, the following data is collected and processed: name, email address, subject, and message content.

This data is transmitted to Resend (resend.com), our email delivery provider, solely for the purpose of delivering your message to us. Resend processes this data as a data processor on our behalf. Reference: Resend Privacy Policy.

The contact form also uses Cloudflare Turnstile for bot-protection. When you interact with the form, Turnstile runs a challenge in a sandboxed iframe hosted on challenges.cloudflare.com. Data processed by Cloudflare: IP address, user-agent string, and browser interaction metadata, used solely to verify the request originates from a human user. Turnstile does not set cross-site tracking cookies. Reference: Cloudflare Privacy Policy.

Legal basis for contact form processing: consent (explicit acceptance of this policy at submission time). Legal basis for Turnstile: legitimate interest (security and abuse prevention).

6. Data sharing

We do not sell, rent, or share your personal data with third parties except as required by law or as described in this policy (Google Analytics, Vercel infrastructure, Cloudflare Turnstile, Resend).

7. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete any personal data we hold about you. Since we do not store personally identifiable information, the primary relevant right is to opt out of Google Analytics tracking.

For any privacy-related requests, contact us via the contact page.

8. Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the site constitutes acceptance of the updated policy.