Privacy Policy

1. Overview

This Privacy Policy explains what personal data ToolPromote (“we”, “us”, “our”) collects when you use toolpromote.com, why we collect it, who we share it with, and the choices you have. It applies to the directory, accounts, submissions, reviews, and paid placements.

We aim to collect as little as possible. You can browse the entire directory without an account, and we do not sell your personal data.

2. Information we collect

We collect only what we need to run the Service:

• Account data: your name and email address, and — if you register with a password — a salted PBKDF2 hash of that password (never the password itself). If you sign in with Google, we receive your name, email, and profile picture from Google.
• Tool submissions: everything you enter in the submission form, including your name, email, and your relationship to the tool, so we can review and publish the listing and contact you about it.
• Sponsor reservations: the company name, website, billing email, and any notes you provide when booking a placement.
• Reviews and votes: reviews you write and tools you upvote. These are currently stored in your browser’s local storage on your device and are not tied to your account until account-synced voting ships.
• Technical data: our host processes standard request information (such as IP address, user-agent, and timestamps) to deliver, secure, and debug the Service.

3. How we use your information

We use personal data to: create and secure your account; review, publish, and maintain listings; process and administer paid placements; send transactional email (email verification, password resets, and — for advertisers — booking and invoice messages); respond to your enquiries; prevent abuse, spam, and fraud; and comply with legal obligations.

We send marketing email (such as a newsletter) only if you explicitly opt in, and you can unsubscribe at any time.

4. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to operate your account and placements); our legitimate interests (to run, secure, and improve the Service and prevent abuse); your consent (for optional marketing); and compliance with legal obligations.

5. Cookies and local storage

We keep cookie use minimal and do not use advertising or cross-site tracking cookies. Specifically we use: a session cookie set by our authentication system when you sign in; and browser local storage for your theme preference and your on-device votes and review drafts. Blocking these may sign you out or reset preferences but will not stop you browsing.

6. Service providers we rely on

We share personal data with a small number of processors only to provide the Service, under agreements that require them to protect it:

• Cloudflare — hosting, content delivery, security, and our database (Cloudflare D1). Request logs and your stored data are processed on Cloudflare’s infrastructure.
• Resend — sends our transactional emails (verification, password reset, advertiser messages). Recipient email addresses and message content are processed by Resend.
• Google — if you choose Google sign-in, Google processes the authentication and shares basic profile data with us under Google’s own privacy policy.

7. How we share information

We do not sell or rent personal data. Beyond the processors above, we disclose information only: to comply with the law or a valid legal request; to enforce our Terms or protect the rights, safety, and property of ToolPromote, our users, or the public; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in control of your data. Information you choose to publish (a listing, a review) is, by design, public.

8. Data retention

We keep personal data for as long as your account is active or as needed to provide the Service, then delete or anonymize it unless a longer period is required for legal, accounting, or fraud-prevention purposes. Rejected submissions and cancelled reservations are retained for a limited period for record-keeping and abuse prevention. Our short-lived email rate-limit logs are pruned automatically.

9. Security

We protect data with measures including HTTPS everywhere, salted PBKDF2 password hashing, signed and expiring links for email verification and password resets, rate limiting, and least-privilege access to our systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to any incident.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. To exercise any of these, email support@toolpromote.com from your account address and we will respond. You can also clear your browser storage to remove on-device votes, drafts, and preferences. You may lodge a complaint with your local data-protection authority.

11. International transfers

We and our processors may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for such transfers.

12. Children

The Service is not directed to children. You must be at least 16 (or the age of digital consent in your country) to create an account. If you believe a child has provided us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact

For any privacy question or request, email support@toolpromote.com. We are the data controller for the personal data described in this policy.