Privacy Policy
At CoreToolSpace, protecting your privacy is fundamental to how we build. Most of our tools run entirely in your browser or process your files and text on the fly without storing them, which means there is often nothing for us to collect at all. This policy explains the small amount of data we do handle, why we handle it, and the rights you have under the General Data Protection Regulation (GDPR).
1. Our commitment to privacy
We are committed to data minimization, privacy by design, and transparency. We never sell your personal data and we never use it for advertising or behaviour-based profiling.
2. Data we collect
We aim to collect as little data as possible:
- Files and text you process — when you use a tool, your input is processed to produce a result. Tool results are served as downloadable files or on-screen output and are not stored on our servers.
- Basic technical data — our servers automatically record standard log information such as IP address, browser type, device type, referral source, and pages visited. This is used only to operate and protect the service and to diagnose errors.
- Contact details — if you email us (for example a GDPR or support request) we use your email address solely to respond to you.
- Local preferences — your theme preference (light/dark) is saved in your own browser's localStorage, not on our servers.
3. How we use your data
- Providing, operating, and improving the tools you use.
- Maintaining security, preventing fraud, and investigating abuse.
- Analysing aggregate usage statistics, so we can improve performance and usability. Analytics records the page you opened, never its contents.
- Responding to your questions and requests.
4. Legal basis (GDPR Article 6)
- Legitimate interests — operating and securing the service, understanding in aggregate which tools are used and where the site is slow, improving performance, and fraud prevention.
- Consent — where we rely on consent (such as optional contact, or marketing email you asked for), you can withdraw it at any time.
- Contract — where necessary to provide a service you requested.
- Legal obligation — where we must comply with applicable law.
5. Your rights under the GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure ("right to be forgotten") — request deletion of your personal data.
- Restriction — ask us to limit how we process your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, email [email protected]. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
6. Cookies
We use a minimal set of cookies and local storage to make the site function and remember your preferences, plus Google Analytics 4, which sets a pseudonymous client ID so we can count pageviews. We do not use advertising cookies, retargeting pixels, or anything that builds a profile of an individual visitor. See our Cookie Policy for exactly which cookies are set, what each one records, and how to opt out.
7. Data retention
Server log data is retained only as long as necessary for security and diagnostics (typically up to 30 days), after which it is deleted or aggregated so it can no longer identify you. Contact messages are kept only for as long as needed to resolve your request.
8. Sharing & transfers
We do not sell, rent, or trade your personal data. We only share data where required by law or with trusted service providers (such as hosting and analytics) who process it on our behalf under strict data-processing agreements. When data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
9. Children's privacy
Our services are not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, and significant changes will be highlighted here.
11. Contact
For any privacy question, data request, or to contact the person responsible for data protection, email [email protected].