Legal

Privacy policy

Last updated 31 October 2026

This policy explains what Toolyconvert Studio ("Studio", at www.studio.toolyconvert.com) stores, why, and for how long. Studio is part of Toolyconvert. Questions or requests: toolyconvert@gmail.com.

The short version

• You can use every tool without an account.
• With an account, we store your email address and the websites and results you choose to keep. No passwords are stored, because there are none.
• No advertising and no data sales. We use Google Analytics to count visits and see which tools are useful, without your email or the websites you check.
• You can see, download and delete your data.

When you use a tool without an account

• What you submit and the result: the web address and options you enter, and the report Studio produces. Reports can be opened only through their random link. They are deleted after 7 days.
• Usage limits: to apply the free limits, we store a one-way keyed code derived from your IP address (not the address itself) with a counter. Counters are deleted after about two days.

When you have an account

• Your email address, the date you accepted the terms, and when you last signed in.
• Sign-in codes: stored only in a scrambled (hashed) form, deleted as soon as they are used and in any case after they expire 10 minutes later.
• Signed-in browsers: for each one, a scrambled form of its sign-in token, a label such as "Chrome on Windows", and when it signed in and was last used. We do not store IP addresses with them. A sign-in lasts up to 30 days.
• Websites and results you save: the sites you add and the checks you run on them, kept for up to 90 days per check.
• Monitoring (if you turn it on): the verification code you placed on your site, your time zone and email settings, a small daily record of what Studio saw (status codes, tags, certificate and domain dates, never page copies) kept for 90 days, and a record of the emails sent to you (kind and time, not their text) kept for 90 days.
• Security events: a record that a sign-in, sign-out or account deletion happened, with its time. It contains no email address.

Websites you check

Studio fetches only public pages, and only when someone asks it to. It keeps the facts needed for the report (status codes, tags, links and short excerpts), not copies of whole pages. See about the Studio crawler.

Cookies and browser storage

• Sign-in cookie (only when you sign in): keeps you signed in for up to 30 days. It is essential for the account to work, so it does not need consent. It is sent only to Studio, never to other sites.
• Theme choice: if you switch between light and dark, your browser remembers it. This stays on your device.

• Google Analytics cookies (_ga, _ga_*): count visits and show which pages and tools are used, with IP addresses shortened. They are set by Google for the same Analytics property as toolyconvert.com. You can block them in your browser or with Google's opt-out add-on; Studio works the same without them.
• Your choice: in the EEA, the UK and Switzerland these cookies are off until you accept them. Elsewhere they are on unless you reject them. Change your choice any time with Cookie settings at the bottom of every page; it is saved in your browser.

Studio uses no advertising or social media cookies.

Server logs

Like most websites, the web server records each request (IP address, time, page requested and browser type) to keep the service secure and working. These logs are deleted after about two weeks. Studio's own application logs do not contain IP addresses, email addresses or sign-in codes.

Who else handles your data

• Hostinger: Studio runs on a server rented from Hostinger in India.
• Brevo: our email provider delivers sign-in codes and the monitoring emails you ask for. It receives your email address and the message. Studio turns off Brevo's open and click tracking.
• Google (Analytics): receives page views and tool usage events (which tool was used, never the address checked, never your email), with shortened IP addresses.
• Razorpay: processes payments for paid plans. Card, UPI and bank details go to Razorpay directly; Studio only receives the payment status.

We do not sell or rent personal data, and we do not share it for advertising.

How long we keep data

• Results of checks without an account: 7 days.
• Saved checks in an account: up to 90 days each.
• Daily monitoring records and email records: 90 days.
• Your account: until you delete it.
• Backups: Studio's database backups are replaced over about five weeks, and the hosting provider's server backups on its own schedule. Deleted data disappears from backups as they are replaced.

Your choices and rights

• See and download your data from your account page.
• Delete a saved website, or your whole account, from your account page. Deletion is immediate.
• Ask us anything about your data, or ask for a correction, at toolyconvert@gmail.com. We reply within 30 days.

Depending on where you live, data protection laws (for example India's Digital Personal Data Protection Act, 2023, or the EU General Data Protection Regulation) may give you further rights. Contact us to use them.

Age

Studio accounts are for people aged 18 or over.

Changes

If this policy changes in a way that matters, we will update the date above and, for account holders, tell you by email before the change takes effect.