Privacy Policy
1. Who we are
Toolkit Scape at toolkitscape.com is operated by Lovelyscape ("we", "us"). We are the data controller for personal data described in this policy. For privacy requests: [email protected].
2. Summary
Toolkit Scape is designed local-first: core tools often process your files in your browser without sending file contents to our servers. This policy explains what we collect, why, how long we keep it, and your rights.
3. Data we typically do not collect (local use)
When you use core tools without signing in:
- We do not receive the contents of files you convert, edit, or enhance in the browser.
- Processing often stays on your device (Web Audio, Canvas, ffmpeg.wasm, document engines).
- Academic Tools: Writing Check and Text Signals run locally in the browser. Citation auto-fill may send URLs you paste so our server can read public page meta tags only.
- We do not sell your personal data.
4. Personal data we may collect
- Technical data: IP address, browser type, device information, timestamps, and request metadata in server logs when you load pages or call our APIs.
- Analytics (public site): Aggregated page-view data via Umami on toolkitscape.com (referrer, country, browser, device, pages visited). Umami does not use advertising cookies; see our Cookie Policy.
- Preferences: Tool settings you save may be stored on our server (for example EQ presets or UI preferences), linked to an anonymous or account identifier.
- Account data (optional / future): Email address, authentication identifiers, and profile data if you create an account.
- Premium features (optional / future): Files or metadata you submit for server-side or third-party AI processing, credit balance, and usage records.
- Communications: Information you send when you contact us by email.
- Cookies and similar technologies: As described in our Cookie Policy, including Google AdSense (non-personalized on Essential only, personalized on Accept all).
5. How we use personal data
- Provide, secure, and improve the Service;
- Authenticate users and manage accounts and credits;
- Respond to support requests;
- Comply with law and enforce our terms;
- Measure and improve the public site (privacy-friendly analytics under legitimate interests, where applicable);
- Display banner ads through Google AdSense: non-personalized on Essential only; personalized ad measurement and relevance on Accept all (see Cookie Policy).
6. Legal bases (EEA, UK, and similar laws)
Where GDPR or UK GDPR applies, we rely on:
- Contract - to provide the Service you request;
- Legitimate interests - privacy-friendly analytics on toolkitscape.com, non-personalized ad delivery on Essential only, security, fraud prevention, and service improvement, balanced against your rights;
- Consent - personalized Google AdSense cookies and any non-essential marketing where required (Accept all in our cookie banner; Google Funding Choices where AdSense shows it in the EEA, UK, and Switzerland);
- Legal obligation - where we must retain or disclose data by law.
7. Sharing and processors
We may share data with service providers who process data on our instructions, such as:
- Hosting and infrastructure providers;
- Authentication and database providers (for example Supabase, when enabled);
- GPU or AI API providers for premium features (for example Replicate, when enabled);
- Content delivery networks for static assets and libraries loaded in the browser;
- Self-hosted Umami analytics (
analytics.fpvschool.com, operated by our group); - Google (AdSense: non-personalized ads on Essential only; personalized ads on Accept all);
We require appropriate contracts and safeguards where required by law.
8. International transfers
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
9. Retention
Server logs are kept only as long as needed for security and operations, then deleted or aggregated. Account, preference, and premium job data are retained while your account is active and as needed for legal, billing, or dispute purposes. You may request deletion subject to exceptions under law.
10. Security
We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure; use the Service at your own risk.
11. Your rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal data;
- Restrict or object to certain processing;
- Data portability;
- Withdraw consent where processing is consent-based;
- Lodge a complaint with a supervisory authority.
To exercise rights, email [email protected]. We may need to verify your identity.
12. Children
The Service is not directed at children under 16. We do not knowingly collect their personal data.
13. Changes
We may update this Privacy Policy. The effective date above will change when we do. Material changes may be communicated in the app or by email where appropriate.