Privacy Policy

1. Who We Are

ToolStack ("we", "us", "our") operates the website usetoolstack.tools. This privacy policy explains how we collect, use, and protect your information when you use our website and tools.

Contact: pointedpentesting@gmail.com

2. Data Processing — Client-Side Architecture

All tools on ToolStack run entirely in your browser. Your data is processed locally on your device using client-side JavaScript. Your inputs — including JSON, text, passwords, images, code, and any other data — are never sent to our servers or any third-party service.

This means we have zero access to anything you enter into our tools. We cannot read, store, or share your data because it never leaves your device.

3. Legal Basis (GDPR)

Under the EU General Data Protection Regulation (GDPR), we process data based on:

• Consent — You consent to advertising and analytics cookies via our cookie banner.
• Legitimate interest — We operate the website, serve ads, and measure performance.
• Contractual necessity — If you subscribe to Pro, we process payment data via Stripe.

4. Information We Collect

Automatically collected (all visitors):

• IP address (anonymized for analytics)
• Browser type and version
• Device type and screen resolution
• Pages visited and referrer URL
• Date/time of visit

We do NOT collect:

• Any data you enter into our tools
• Names, emails, or personal identifiers (unless you contact us)
• Passwords, tokens, or credentials
• Uploaded files (processed in-browser only)

5. Cookies & Tracking

5.1 Cookie Consent

On your first visit, you will see a cookie consent banner. You can choose to:

• Accept All — Enables advertising cookies and analytics.
• Reject Ads — Disables advertising. Analytics may still run (privacy-friendly).

You can change your preference at any time by clearing your browser storage for this site.

5.2 Advertising Cookies (Google AdSense)

If you accept advertising cookies, Google AdSense may use cookies to serve personalized ads. These cookies track your browsing across sites to show relevant advertisements. Google's privacy policy: policies.google.com/privacy.

5.3 Analytics

We use Google Analytics to understand how visitors use the site. Google Analytics uses cookies to collect anonymous usage statistics. You can opt out via Google's browser add-on. IP addresses are anonymized.

5.4 Functional Cookies

We store your theme preference (dark/light mode) in your browser's local storage. This is a functional cookie required for the site to work and does not require consent.

6. Third-Party Services

7. Data Retention

• Tool data: Never stored. Processed in your browser and discarded when you close the tab.
• Analytics data: Plausible retains data for up to 24 months, then aggregates it.
• Cookie consent: Stored in your browser's local storage until you clear it.
• Contact emails: Retained until the inquiry is resolved.

8. Your Rights (GDPR)

If you are in the European Economic Area (EEA) or UK, you have the right to:

• Access — Request a copy of the data we hold about you.
• Rectification — Request correction of inaccurate data.
• Erasure — Request deletion of your data.
• Restriction — Request restriction of processing.
• Portability — Request your data in a portable format.
• Objection — Object to processing based on legitimate interest.
• Withdraw consent — Withdraw consent at any time (via cookie settings).

Since we process virtually no personal data (all tools are client-side), most of these rights are satisfied by design. To exercise any right, contact us at pointedpentesting@gmail.com.

9. CCPA / CPRA (California)

If you are a California resident, you have the right to:

• Know what personal information is collected and how it is used.
• Delete your personal information.
• Opt out of the sale of personal information.

We do not sell your personal information.Google AdSense may use cookies for ad personalization, which under CCPA could be considered a "sale" of data. You can opt out by rejecting advertising cookies via our consent banner.

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as an opt-out of ad personalization.

10. Credit Card Disclaimer

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be communicated via the website.

12. Contact Us