Privacy Policy
Last updated: June 2026
1. Introduction
TolMaker ("we", "our", or "us") operates the website tolmaker.com (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information
When you create an account, we collect:
- Email address — for account identification and communication
- Name (optional) — to personalize your experience
- Google account information — if you sign in via Google OAuth, we receive your email, name, and avatar
2.2 Usage Data
We may collect information about how the Service is accessed and used, including:
- Browser type and version
- Pages visited and time spent
- Referring website URLs
- IP address (for rate limiting and quota enforcement)
2.3 Uploaded Content
Images you upload for processing are handled entirely in your browser. Our image processing tools (resizing, background removal, EXIF editing, color extraction, GPS scrubbing) use client-side Canvas API or process images locally. Your photos are never uploaded to our servers by the current tools.
3. Cookies and Tracking
3.1 Essential Cookies
We use essential cookies for:
- Authentication — to keep you signed in (auth_token cookie, HttpOnly)
- Preferences — to remember your cookie consent choice
3.2 Third-Party Cookies
We use Google AdSense to display advertisements on our Service. Google AdSense uses cookies to serve ads based on your prior visits to our website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Service and/or other sites on the Internet.
You may opt out of personalized advertising by visiting Google Ads Settings or by visiting www.aboutads.info.
3.3 Google Analytics
We may use Google Analytics to understand how visitors interact with our Service. Google Analytics collects anonymized usage data via cookies. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
4. How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features
- To provide customer support
- To monitor the usage of our Service and detect abuse
- To enforce our quota and rate-limiting policies (based on IP and user accounts)
- To display relevant advertisements via Google AdSense
5. Data Storage and Security
Account data (email, name, usage quotas) is stored in our secure database. We implement industry-standard security measures including:
- Passwords are hashed using bcrypt
- Authentication tokens use JWT with cryptographic signatures
- HTTPS encryption for all data in transit
- HttpOnly cookies to prevent XSS token theft
However, no method of transmission over the Internet or electronic storage is 100% secure.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Objection — object to processing of your data
- Portability — receive your data in a structured format
To exercise these rights, contact us at the email listed in Section 9.
8. Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- By email: privacy@tolmaker.com
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. Changes are effective immediately upon posting.