1. Information We Do NOT Collect (Zero File Uploads)

Unlike traditional online conversion websites that require you to upload confidential documents, ID cards, personal photos, or PDFs to a remote cloud server, ToolDolfen executes processing entirely within your browser's runtime:

• No File Storage: We do not store, view, scan, copy, or retain any images, PDFs, text snippets, or documents you select.
• No Server Transit: Your files never travel across the network to our application servers during conversion, compression, or editing.
• Instant Memory Purge: When you navigate away from a tool or refresh the page, all file data held in your browser's local sandbox memory is immediately and permanently discarded.

2. Information We Collect Automatically

When you visit ToolDolfen, our web hosting infrastructure automatically logs standard internet protocol information necessary to maintain website availability, mitigate distributed denial-of-service (DDoS) threats, and detect malicious scraping:

• Server Access Logs: IP address, browser type and version, operating system, referring URL, pages viewed, and timestamps. Access logs are kept for routine security audits and automatically rotated.
• Aggregated Performance Metrics: General device type (mobile, tablet, desktop) and viewport dimensions to ensure responsive rendering.

3. Cookies, Consent & Tracking Technologies

We use cookies and browser local storage (localStorage) to deliver core website functionality and support our free service. For a complete inventory of every cookie, provider, duration, and management option, please consult our dedicated Cookie Policy:

A. Strictly Essential Cookies & Storage

These cookies are vital for the site to function securely. They cannot be disabled in our systems:

• tooldolfen_session: Secures your session if you log in as a registered user or administrator.
• _csrf: Protects against Cross-Site Request Forgery attacks on interactive forms.
• td_cookie_consent: Stores your cookie consent preferences in localStorage so you are not prompted on every page.

B. Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (Measurement ID: G-BY228EZGRX) to understand how visitors interact with our tools, identify broken links, and optimize site speed. GA4 collects pseudonymized metrics such as session duration, approximate geographic region (country/city level), and tool popularity.

IP Anonymization: IP addresses are masked and anonymized by Google Analytics. You can accept or decline analytics cookies at any time via our Cookie Preferences or install the official Google Analytics Opt-out Browser Add-on.

C. Advertising Cookies (Google AdSense)

ToolDolfen is a 100% free utility funded by advertising. We partner with Google AdSense to display non-intrusive banner advertisements:

• Google and third-party vendors use cookies (including the DoubleClick cookie) to serve ads based on a user's prior visits to this website or other websites on the internet.
• Google's use of advertising cookies enables it and its partners to serve ads based on your visit to ToolDolfen and/or other sites on the Internet.
• You may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendor cookies for personalized advertising by visiting aboutads.info.

4. Voluntary Information You Provide

• User Accounts: If you register an account, we collect your name, email address, and a cryptographically salted password hash. We never store plain-text passwords. Two-Factor Authentication (TOTP) secrets are stored securely to protect your account.
• Contact Form & Feedback: If you contact us via our contact page, we collect your name, email address, and message to respond to your inquiry. We retain messages until your support request is resolved.
• Live Chat Widget: Guest and authenticated live chat interactions are stored in our secure database to provide customer service. Messages contain only what you voluntarily type.

5. Data Retention & Security Measures

We employ rigorous industry standards to safeguard your data:

• Full HTTPS / TLS Encryption: All data in transit between your browser and our servers is encrypted using modern 256-bit TLS protocols.
• Two-Factor Authentication (2FA): Administrative access is fortified with RFC 6238 TOTP authentication and single-use emergency recovery codes.
• SQL Injection & XSS Protection: All database interactions utilize prepared statements and parameterized queries. Content output is sanitized against Cross-Site Scripting (XSS).
• Zero Third-Party Data Selling: We do not sell, rent, monetize, or trade your personal information or contact details to third parties or data brokers.

6. Your Privacy Rights (GDPR, UK GDPR, and CCPA/CPRA)

Depending on your geographical location, you have statutory rights concerning your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your account, contact submissions, or chat records.
• Right to Object & Restrict Processing: You may object to the processing of your data or decline non-essential cookies.
• Right to Non-Discrimination: We will never deny services, alter quality, or charge different prices for exercising your privacy rights.

To exercise any of these rights, email us at support@tooldolfen.com. We respond to all verified requests within 30 days.

7. Third-Party CDN Libraries

To deliver fast and resilient client-side execution, ToolDolfen loads audited open-source libraries (such as PDF.js, PDF-Lib, and TinyMCE) from reputable Content Delivery Networks (including jsDelivr and cdnjs). These CDNs may log standard IP and browser headers solely to deliver the requested script files efficiently.

8. Children's Privacy Protection

ToolDolfen does not knowingly collect or solicit personal information from children under the age of 13 (or 16 in the European Economic Area). If we learn that we have inadvertently collected personal data from a child without verified parental consent, we will delete that information immediately.

9. Policy Changes & Updates

We may periodically update this Privacy Policy to reflect technical enhancements, architectural upgrades, or legal requirements. Material updates will be highlighted on this page along with an updated effective date.

10. Contact Us & Data Controller

If you have questions, concerns, or requests regarding this Privacy Policy or our client-side processing practices, please reach out to our privacy team: