Privacy Policy

Who we are

ToolPotion (“ToolPotion”, “we”, “us”) operates toolpotion.ai, a directory of AI tools and software. This policy explains what information we collect when you use the site, how we use it, who we share it with, and the choices you have. The fastest way to reach us about anything in this policy is the contact page.

Information we collect

We only collect what the features you use actually need:

• Account data. When you create an account or sign in, our authentication provider processes your email address, name and password (or your third-party sign-in identity). We never see or store your password in readable form.
• Content you submit. Tool submissions (tool name, description, URL, category, type and any comment), reviews, favorites, and messages sent through the contact form (your name, email address, subject and message).
• Email verification data. When we verify your email for a submission, we generate a one-time code. We store only a cryptographic hash of it, and it expires within minutes.
• Usage data. Pages and listings viewed, and standard technical data our servers receive with any request (IP address, browser type, referring page). Server logs are used for security and operations, not profiling.
• Preferences. Your selected language, stored in a cookie so the site opens in your language next time.

How we use your information

• To provide and operate the directory, your account, favorites and reviews.
• To process, review and publish tool submissions.
• To respond to messages you send us and notify our team about them.
• To send transactional email only — verification codes and confirmations of things you did (a submission, a contact message). We do not send marketing email, and we do not sell or rent personal data to anyone.
• To keep the service secure, prevent abuse, and enforce rate limits.
• To understand aggregate usage and improve the directory.
• To comply with legal obligations.

Legal bases for processing

Where laws such as the GDPR apply, we rely on: performance of a contract (running your account and processing your submissions), legitimate interests (security, abuse prevention, improving the service), consent where we ask for it, and legal obligation where retention or disclosure is required by law.

Cookies

We use a deliberately small set of cookies:

• Session cookies (essential) — keep you signed in. HTTP-only and required for accounts to work.
• Language preference (selected_language) — remembers the language you chose, for up to one year.
• Cookie choice (tp_consent) — remembers whether you accepted or rejected analytics cookies, for up to one year.
• Analytics (Google Analytics: _ga, _ga_*) — anonymous statistics about which pages are visited and how the site is used. In the European Economic Area, the UK and Switzerland these cookies are set only after you click Accept in the cookie banner. Elsewhere they are on by default, and you can switch them off at any time by choosing Reject in the banner. Google advertising features stay off unless you accept.

We also count visits with Cloudflare Web Analytics, which does not use cookies or fingerprinting.

Our own first-party analytics uses no cookies and stores nothing on your device. It records the pages you view, how you arrived and your IP address, which we use to estimate your country, city and network (internet provider or company, via the free DB-IP database). A daily-changing anonymous code counts unique visitors without recognising you on another day. Detailed visit data, including IP addresses, is deleted after about a week; only aggregated daily totals are kept.

We do not use third-party advertising or cross-site tracking cookies. You can delete or block cookies in your browser settings; blocking the essential ones will sign you out.

Service providers

We share data only with the providers that run the service, only to the extent needed to run it: our hosting platform, our database and authentication provider, our transactional email provider (which processes the email addresses we send to), and our cloud storage and content-delivery network for images. These providers process data on our behalf, and data may be processed in the United States and other countries. We may also disclose information if required by law, or to protect the rights, safety or integrity of the service.

Data retention

• Account data is kept while your account exists.
• Submissions and reviews are kept while they are live or under review; contact messages are kept as long as needed to handle them and keep a record of the exchange.
• Verification codes expire within minutes and are stored only as hashes.
• Server logs are retained for a short operational window.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to your local data-protection authority. To exercise any of these, message us via the contact page from the email address concerned — we will respond within the timelines required by applicable law.

Children’s privacy

ToolPotion is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

Third-party sites

The directory exists to link out to third-party tools. Once you leave toolpotion.ai, the privacy practices of the site you land on are governed by that site’s own policy — we are not responsible for them, and listing a tool is not an endorsement of its data practices.

Security

We use reasonable technical and organizational measures to protect your data — encrypted connections (HTTPS), hashed verification codes, HTTP-only session cookies and restricted internal access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if a breach affecting your data occurs, we will notify you as required by law.

Changes to this policy

We may update this policy as the service evolves. The date at the top reflects the latest revision; material changes will be signposted on the site. Continuing to use ToolPotion after a revision takes effect means you accept the revised policy.

Contact us

Questions, requests or concerns about privacy — use the contact page and we will get back to you.