Privacy
Plain summary of what this site records. No advertising cookies, no selling of data, and no account required to browse.
At a glance
- Browsing the directory requires no account and no personal data.
- Saving a tool stores a list in your own browser, unless you sign in — then it is synced to your account so it follows you between devices.
- We log which tool links get opened, in aggregate, to understand what people look for.
- No advertising or ad-network cookies. Nothing is sold.
What we record automatically
- Outbound clicks. When you open a tool through ToolVault, we record which tool, and the time, only if you allow optional statistics. We do not store IP addresses, referring URLs, or browser user agents in these click records. Records are removed after 90 days. This tells us what is worth keeping and updating, and it is the basis of the usage numbers we can show vendors. We do not tie these records to an identity.
- Server logs. Our hosting provider keeps standard request logs, which may include IP addresses, under the hosting provider’s retention settings.
Saved tools, with and without an account
Saving a tool writes its identifier to local storage in your browser. While signed out, it stays on your device, and clearing your browser data removes it.
If you sign in, that list is additionally stored against your account so it can be restored on other devices. You can sign in with Google or an email address and password. We store your email, account identifier, optional provider name and avatar, a password hash for password accounts, session records, and saved tool identifiers. Registration does not require email verification.
Authentication sessions and saved lists are stored in ToolVault's own Cloudflare D1 database. You can delete the saved list at any time by unsaving tools, and you can ask us to delete the account record itself using the contact address below.
Tool submissions
If you submit a tool, we keep what you typed — the tool's URL, your account email, description, category, backlink page, and notes — so we can review it. We do not publish your email address.
Payments
Stripe processes payments; we do not store card numbers. We keep order references, purchased credits, amounts, and listing associations to deliver placements and handle refunds. Payment records and account data are held while needed to operate the service and meet applicable recordkeeping requirements.
Cookies and local storage
We use the smallest set of storage mechanisms that make the site work:
- Necessary. Local storage for your saved tools and for your cookie choice, and — if you sign in — a session cookie that keeps you signed in. The site cannot function without these, so they are not offered as a choice.
- Optional statistics. Off until you allow it in the cookie notice. We currently load no third-party analytics or advertising scripts at all; if that changes, the notice is where the choice is recorded and enforced.
You can change your choice at any time using Cookie settings in the footer, or clear site data in your browser.
Legal bases (EEA and UK)
- Necessary storage: legitimate interest in delivering a service you have asked for.
- Optional statistics: your consent, which you can withdraw.
- Account data: performance of the service you requested when you choose to sign in.
Your rights
- EEA / UK: access, correction, deletion, portability, and objection to processing. You can also complain to your local data protection authority.
- California: we do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioural advertising.
- Everyone else: write to us and we will delete or export what we hold about you.
International transfers
This site is operated for an international audience and data may be processed in the country where our hosting and database providers run their infrastructure. Those providers are contractually bound to protect it; we do not transfer it onwards for anyone else's purposes.
Children
The site is aimed at people choosing software for work. It is not directed at children under 16, and we do not knowingly collect their data.
Links
Every tool page links to a site we do not control. Once you leave ToolVault, that site's own policy applies.
Contact
Questions about this policy, or a request to remove or export something, can go to the address on the contact page.
Last updated: 11 October 2026.