Privacy Policy

We collect only what the service needs to work:

• Account information (only if you sign up): your email address, an optional name, and your password. Passwords are stored only as a one-way hash — we never see or store your plain-text password. We also store whether your email is verified.
• Your saved work (only if you are signed in and choose to save it): invoices, QR codes and short links you save to your account.
• Verification codes: when we email you a sign-in or password-reset code, we store only a hash of the code, and it expires shortly after it is sent.
• Messages you send to the AI Assistant, including any photos you attach, which are sent to our AI provider (see section 3) so it can reply. We do not save your assistant chats to your account.
• Technical information used to keep the service fair and running: your IP address is used only for rate limits (for example, the AI Assistant allows 50 messages per IP per day). These counters live in server memory and reset when the server restarts.

Many tools run entirely in your browser and your data never leaves your device: the password generator, colour tools, text tools, image metadata tools, watermark tool, calculators, notes, typing test, QR code scanner and similar tools. Some tools need our server to do the work:

• File conversions (PDF tools, document and audio format changes): your file is uploaded to a temporary folder on our server, converted, and the folder is deleted as soon as the conversion finishes — including if it fails.
• Text to Voice: the text you type is sent to our server so the voice can be generated. English and Hindi voices are generated on our own server; Bangla voices are generated through Microsoft's Edge text-to-speech service (see section 3).
• Translator: translation runs first on our own translation server. Only if that server cannot translate does the request fall back to MyMemory (see section 3).
• AI Assistant: your message is sent to OpenRouter, our AI provider, so it can answer (see section 3).
• Currency Converter: exchange rates are fetched from a public rates service. No personal data is sent with that request.

We use a small number of outside services to run parts of ToolForge. They receive only the content needed for that one job, and only when you use that tool:

• OpenRouter — answers AI Assistant messages (text and photos).
• Microsoft Edge text-to-speech — generates Bangla voices in Text to Voice.
• MyMemory — fallback translation, used only when our own translation server cannot translate.
• open.er-api.com — public exchange rates for the Currency Converter.
• Our email provider (SMTP) — sends account emails: welcome, verification codes and password-reset codes.

These services have their own privacy policies. We do not share your account details or your saved work with them.

• Session cookie: keeps you signed in. It is httpOnly, which means page scripts cannot read it.
• Anonymous visitor cookie: a random id used only for rate limits. It contains no personal information.
• Local storage on your device: your favorites, pinned tools, recently used tools, theme choice, notes, password history, saved colour palettes, invoice business details and saved invoices, and your world-clock preference. This data lives in your browser only and is never sent to our servers.
• You can remove the browser data at any time from Settings → Clear my saved data, or by clearing your browser's site data.

• We do not sell, rent or trade your personal data.
• We do not show advertisements and we do not use third-party analytics or cross-site tracking.
• We do not share your account data or saved work with anyone except the services listed in section 3, and only for the job you asked for.

• Account data is kept while your account exists.
• Files uploaded for conversion are deleted as soon as the conversion finishes.
• Verification codes expire shortly after they are sent and are never stored in plain text.
• Rate-limit counters are kept in server memory and disappear when the server restarts.

• You can use most tools without creating an account at all.
• You can clear everything saved in your browser from Settings → Clear my saved data.
• To delete your account and the data stored with it, or to ask for a copy of your account data, email support@toolforge.chatforge.shop and we will take care of it.

ToolForge is a general-purpose set of everyday tools and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email support@toolforge.chatforge.shop and we will remove it.

If we change this policy in an important way, we will update the date at the top of this page. Continued use of ToolForge after a change means you accept the updated policy.