ToolBody

Privacy Policy

Effective Date: 13 June 2026 Last Updated: 13 June 2026

1. Introduction

This Privacy Policy describes how ToolBody ("ToolBody", "we", "us", or "our") collects, uses, and shares information about you when you use the website at https://toolbody.cloud and the free browser-based tools provided on it (the "Service").

We've tried to write this policy in plain language. The structure follows the requirements of the EU General Data Protection Regulation (GDPR), the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and the disclosure requirements for advertising programs we use (such as Google AdSense).

If you don't agree with anything in this policy, please don't use the Service.

2. Who we are

ToolBody is operated by the ToolBody team, located at United Arab Emirates. We are the data controller for the personal information described in this policy.

For privacy-related questions or requests, contact us at: privacy@toolbody.cloud.

3. Summary — what this policy says in one paragraph

We deliberately collect very little personal data. The core tools on ToolBody (stamp maker, invoice maker, signature maker) process your inputs locally in your browser — your stamp designs, invoice contents, and signatures don't reach our servers. We collect anonymous technical information (server logs, basic analytics) when you visit, we collect your email and message if you contact us, and we serve ads through Google AdSense which uses its own cookies. We don't sell personal data, we don't share it with marketers, and you have rights over the data we do hold. The full details follow.

4. Information we collect

We collect information in three categories:

4.1 Information you provide to us

  • Contact form / email submissions. If you contact us via our contact form or by sending us an email, we receive: your name, your email address, the subject and content of your message, and any attachments you choose to send. We use this information only to respond to your message and to keep a record of our correspondence.

4.2 Information collected automatically

When you visit ToolBody, we (or our service providers) may automatically collect:

  • Server logs: your IP address, the page you visited, the date and time of your visit, the referring URL, your browser type and language, your operating system, and similar technical information. This is standard web-server logging.
  • Analytics data: if analytics is enabled, aggregate information about page visits, time on page, user flow, device type, and approximate location (country level). We use Google Analytics for this.
  • Cookies and similar technologies: see Section 6 below for details.

4.3 Information NOT collected

We want to be clear about what we don't collect, because it's a significant feature of how the tools work:

  • The content of stamps, invoices, or signatures you create using the tools. All of this is processed locally in your browser. We don't store these on our servers, we can't see them, and we couldn't share them even if asked. When you close the browser tab, that data only continues to exist in the file you downloaded to your own device.
  • Your client names, addresses, or invoice amounts. Same as above — these stay in your browser.
  • Payment information. We don't process payments because all tools are free.
  • Account information. There are no user accounts.

5. How we use information

We use the information described above for the following purposes:

  • To provide the Service: loading pages, delivering the tools, processing your contact form submissions.
  • To respond to your inquiries: if you contact us, we use your contact information to reply.
  • To maintain and improve the Service: anonymous analytics help us understand which tools are used most and where improvements would help users.
  • To serve advertising: advertising on the site is delivered by Google AdSense — see Section 7 below.
  • To comply with legal obligations: we may use or disclose information when required by law, regulation, legal process, or governmental request.
  • To protect against fraud and abuse: detecting and preventing spam, bot traffic, scraping, denial-of-service, or other abuse of the Service.

Legal bases for processing (GDPR)

Where the GDPR applies to our processing, our legal bases are:

  • Legitimate interests — for server logs, analytics, security, fraud prevention, and serving non-personalised ads.
  • Consent — for personalised advertising cookies (where applicable based on your region), and for any optional cookies set after a consent banner.
  • Performance of a contract — for processing your messages when you contact us.
  • Legal obligation — when we must process or retain data for legal compliance.

6. Cookies and similar technologies

What cookies are

Cookies are small text files stored on your device by your browser. They're used by virtually every website on the internet for things like keeping you logged in, remembering your settings, and (relevant here) showing relevant advertising.

How ToolBody uses cookies

We use the following categories of cookies:

  • Essential cookies. Required for the site to function. These store things like your draft invoice content locally in your browser. They are not used for tracking.
  • Analytics cookies. Used by Google Analytics to gather anonymous usage statistics. These allow us to see how the site is used in aggregate, but don't identify you individually.
  • Advertising cookies. Used by Google AdSense and (potentially) other ad networks to deliver ads. These may be used to show personalised advertising based on your past visits to ToolBody and other websites, depending on your region's rules and your consent preferences.

Your choices about cookies

  • Cookie banner: if you're located in a region where consent is required (EU/EEA, UK, and increasingly others), you'll see a cookie consent banner on your first visit. You can accept, reject, or adjust your preferences.
  • Browser settings: every major browser allows you to block cookies entirely, block third-party cookies, or delete cookies after each session. Doing so may affect the functionality of some parts of the site.
  • Opt out of personalised ads: you can opt out of personalised advertising directly with Google at https://adssettings.google.com and via the industry opt-out at https://optout.aboutads.info.

7. Advertising (Google AdSense disclosure)

ToolBody is supported in part by advertising. We use Google AdSense, an advertising service operated by Google LLC.

The following disclosures are required by Google AdSense:

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
  • Google's use of advertising cookies enables Google and its partners to serve ads to you based on your visits to ToolBody and other sites on the internet.
  • You may opt out of personalised advertising by visiting Google's Ads Settings (https://adssettings.google.com) or, more broadly, https://www.aboutads.info/choices.
  • Google's privacy policy is available at https://policies.google.com/privacy.

We do not control the specific ads shown on ToolBody — Google's systems select them based on context and user data. We do not provide any user-specific information to Google or to advertisers beyond what Google's standard AdSense cookies capture.

If you'd prefer no personalised ads on ToolBody, you can either opt out via the links above or use the cookie banner (where shown) to reject advertising cookies.

8. Third-party services we use

In addition to Google AdSense, we may use the following third-party services. Each one has its own privacy policy:

  • Web hosting. Our hosting provider receives standard server-log data (IP addresses, request timestamps, etc.) as part of delivering the website.
  • Analytics. Google Analytics processes anonymous usage data on our behalf. Their privacy policy: [link to the provider's privacy policy].
  • Google Search Console. A free Google service that provides anonymous data about how our site appears in search results. It does not track individual users.
  • Email infrastructure. Email you send us is received by our email provider (e.g., Google Workspace, ProtonMail, or a similar service) and stored in our inbox.
  • Anti-spam services. Our contact form may use an anti-spam provider (e.g., Cloudflare Turnstile, Google reCAPTCHA, hCaptcha) which receives basic browser/IP information to verify you're human.

We do not use any of the following:

  • Marketing automation platforms or CRM systems with your data
  • Data brokers
  • Tracking pixels for affiliate marketing
  • "Session replay" or screen-recording tools

9. How we share information

We do not sell your personal information. We share information only in these specific circumstances:

  • Service providers. With the third-party services listed in Section 8, strictly to operate the Service.
  • Advertising partners. With Google AdSense, as disclosed in Section 7.
  • Legal compliance. If required to comply with applicable law, regulation, legal process, valid governmental request, or to protect our rights or the rights and safety of others.
  • Business transfers. If ToolBody is ever acquired or merged with another entity, your information may be transferred — but only under terms that maintain the protections of this policy, and we would notify users in advance of any such transfer.

10. International data transfers

ToolBody is operated from United Arab Emirates, and our service providers may be located in multiple countries (notably the United States, the European Union, and the United Arab Emirates). When personal data is transferred internationally, we rely on appropriate safeguards as required by applicable law, including:

  • Standard Contractual Clauses (SCCs) for transfers from the EU/EEA.
  • Adequacy decisions for transfers to countries the European Commission considers to provide adequate protection.
  • The UAE PDPL's provisions for cross-border data transfers from the UAE.

You can request more information about specific safeguards by contacting us.

11. Data retention

We keep different categories of data for different periods:

  • Server logs: typically up to 90 days, then deleted or aggregated.
  • Analytics data: typically aggregated and retained for up to 26 months.
  • Contact form / email correspondence: retained for as long as needed to resolve your inquiry, plus a reasonable period for record-keeping (typically up to 24 months). You can ask us to delete sooner.
  • Cookies: vary by type. Essential cookies expire at the end of your session or shortly after. Analytics and advertising cookies have expiration periods set by the provider (typically a few months to 2 years).

We don't retain data longer than necessary for the purposes it was collected for, unless required by law.

12. Your rights

Depending on where you live, you have certain rights over your personal information. We honour these rights regardless of where you live, to the fullest extent practical.

Rights under the GDPR (for users in the EU/EEA, UK, Switzerland)

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request that we correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") — request that we delete your personal data, subject to certain exceptions.
  • Right to restrict processing — request that we temporarily stop processing your data.
  • Right to data portability — request a machine-readable copy of data you provided to us.
  • Right to object — object to certain processing, including direct marketing and processing based on legitimate interests.
  • Right to withdraw consent — at any time, where processing is based on consent.
  • Right to lodge a complaint — with a supervisory authority in your country.

Rights under the UAE PDPL (for users in the UAE)

Similar rights apply, including the right to access, correct, delete, port, restrict, and object to the processing of your personal data, as well as the right to lodge a complaint with the UAE Data Office.

How to exercise your rights

Email privacy@toolbody.cloud with the request. We aim to respond within 30 days. We may need to verify your identity before we can act on a request. There's no charge for reasonable requests.

13. Children's privacy

ToolBody is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, please contact privacy@toolbody.cloud and we'll delete the information.

If you are between 16 and 18, please use the Service only with the involvement of a parent or guardian.

14. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (HTTPS across the whole site), restricted access to email and analytics dashboards, and regular updates to underlying software.

That said, no system is perfectly secure. If we ever become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by applicable law.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last Updated" date at the top of this page. For material changes — particularly changes that affect how we collect or share personal information — we'll provide more prominent notice (such as a banner on the site, or an email if we have your address).

Your continued use of ToolBody after the changes take effect indicates your acceptance of the updated policy.

16. Contact us

For any questions, requests, complaints, or comments about this policy or our data practices:

  • Email: privacy@toolbody.cloud
  • Mail: United Arab Emirates

For general (non-privacy) inquiries, see our Contact page.