Privacy Policy

Toolocate (toolocate.com) is operated by Baolin Zhang, an individual in China. This policy explains what we collect, why, and what you can ask us to do with it. We collect as little as we can. Questions or requests: [email protected].

What we collect

• Browsing. Reading the site needs no account and sets no cookies. We count visits with Cloudflare Web Analytics and Ahrefs Web Analytics, neither of which uses cookies or tracks you across sites. Your theme and language choices are kept in your browser's local storage and never sent to us.
• Submitting a tool. The website you submit, and the tool name, email and note you choose to give.
• Suggesting an edit. Your message, the topic, the tool, and your email if you give one.
• Newsletter. Your email, the language you subscribed in, and when you confirmed or unsubscribed.
• Buying a listing or an ad. Your email; what you bought and when; the amounts paid and refunded; the website of the listing; changes you make to your listing; and the title, tagline, link and image of your ad.
• Abuse protection. Forms are protected by Cloudflare Turnstile. For rate limits we keep a one-way hash of your IP address, never the address itself.

We don't receive or store card details. Payments are handled by Waffo Pancake (see “Who processes data for us”).

Cookies

We set one cookie, and only if you sign in to your dashboard: __Host-tl_session on api.toolocate.com. It keeps you signed in, is strictly necessary for the dashboard, and expires after 30 days or when you sign out. We use no advertising or tracking cookies. Cloudflare may set cookies needed for security when it checks for bots.

How we use it

• To review submissions and corrections and reply to you about them.
• To process orders: list and check your tool, show your ad on the days you booked, give you a dashboard, and handle refunds.
• To send the emails you asked for: sign-in links, receipts and updates about your order, and the newsletter if you confirmed your subscription.
• To keep the forms and the site safe from abuse.

We don't sell your data, and we don't use it for advertising.

Who processes data for us

• Waffo Pancake processes payments as the merchant of record for our orders. It collects your payment and billing details, handles sales tax, and issues receipts and invoices, under its own privacy policy.
• Cloudflare hosts the site and ad images, runs the bot check (Turnstile) and counts visits (Web Analytics).
• Ahrefs counts visits (Web Analytics), without cookies and without storing IP addresses.
• Resend delivers our emails.
• Our database runs on a server we operate; it isn't shared with anyone else.

Emails and unsubscribing

Order emails (receipts, sign-in links, “your listing is live”, ad reminders) are sent only about orders you placed. The newsletter is sent only after you confirm your subscription from the email we send you; unconfirmed sign-ups are deleted after 30 days. Every newsletter has a one-click unsubscribe link, and the unsubscribe header your email app shows works too. We keep a note that you unsubscribed so we don't email you again, unless you ask us to delete it.

How long we keep it

• Sign-in links expire after 15 minutes (links in order emails after 24 hours) and work once; newsletter confirmation links expire after 7 days. We store only hashes of these links.
• Hashed IP addresses used for rate limits are deleted after a day.
• Order records are kept as long as accounting and tax rules require.
• Everything else is kept while it's needed for the purpose above, or until you ask us to delete it.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Email [email protected] from the address concerned and we'll reply within 30 days. We may keep order records we're required to keep by law. You can also complain to your local data protection authority.

Children

Toolocate isn't meant for children under 16, and we don't knowingly collect their data.

Changes

If we change this policy we'll update the date above; for significant changes we'll tell buyers and subscribers by email.