Privacy Policy

This policy explains what ToolMints collects, why, who it is shared with and how long it is kept. It reflects how the service is actually built — nothing is described here that the site does not do.

Media jobs

When you submit a URL we store the submitted URL, the requested output format and quality, and the job's timing and status. This is needed to run the conversion, to show you progress, and to detect abuse. The media file produced by a job is written to temporary storage on an isolated processing service and is deleted automatically once its short expiry window passes. ToolMints does not keep a library of your downloads and does not inspect or reuse the media content.

Abuse prevention and security logs

We store a salted hash of your IP address and user agent rather than the raw values, together with request counts and timestamps. These are used only for rate limiting, blocking abusive traffic and protecting the processing service, and they expire on a rolling schedule. Server error and security logs may briefly contain technical request metadata.

Accounts

An account is optional and only needed for Premium. If you create one we process your email address and authentication data through our hosted database and authentication provider. Passwords are never visible to us.

Payments and donations

Payments are processed by Stripe. Your card details go directly to Stripe and never reach ToolMints servers. For a subscription we store the subscription status, plan, period end, and the provider customer and subscription identifiers so we can grant or withdraw Premium. For a donation we store the amount, currency, status, the provider payment reference and — if you supplied one at checkout — the receipt email. Stripe processes this data as an independent controller under its own privacy policy.

Advertising, consent and cookies

ToolMints is free and supported by advertising shown to free users only. Premium subscribers are served no advertising and no advertising scripts are loaded for them. No advertising is displayed while no ad provider is configured and approved.

When advertising is active, our advertising partner (Google AdSense, operated by Google LLC) may set cookies or similar identifiers on your device to serve, cap and measure ads, and may process your IP address, device and browser information and the pages you view on ToolMints. Google's use of this data is described in How Google uses information from sites that use its services. You can opt out of personalised advertising at Google My Ad Center.

In regions that require consent (including the EEA, the UK and Switzerland), consent is collected through Google's certified consent management platform before personalised advertising data is used, and your choice is stored by that platform in your browser. You can change it at any time from the privacy options control it provides, or by clearing this site's browser storage. Where consent is refused, advertising is requested in non-personalised form only. We never sell personal information, and we never send the media URLs you submit to any advertising partner.

Analytics

We do not run a third-party web analytics product. Aggregate operational counters (such as job totals and error rates) are derived from the job records described above and are used only to run and improve the service.

Who we share data with

Our hosting and database/authentication provider, our isolated media processing host, Stripe (payments) and Google (advertising and consent). We also disclose data where we are legally required to. We do not sell personal data.

Retention

Processed media files: deleted automatically after their short expiry window. Job records: kept only as long as needed for operations and abuse prevention. Hashed abuse identifiers: expire on a rolling schedule. Subscription and donation records: kept while needed for the subscription and afterwards for the period required by tax, accounting and dispute-handling obligations. Account data: kept until you ask us to delete it.

Security

ToolMints validates every submitted URL server-side, refuses private and internal network targets, runs media processing in an isolated service, issues only short-lived capability-restricted download links, and verifies payment webhooks cryptographically. No system is perfectly secure, but these controls are enforced on the server rather than in the browser.

International transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on the safeguards those providers put in place, such as standard contractual clauses.

Children

ToolMints is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their personal data. If you believe a child has provided data, contact us and we will delete it.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. You can request deletion of your account and associated records at any time by emailing privacy@toolmints.com. You also have the right to complain to your local data protection authority.

Changes

We may update this policy as the service changes; the current version is always published here. Continued use after an update means you accept it. See also the Terms of Service and the Refund & Cancellation Policy.