Privacy Policy

This policy explains what ToolQuilt collects, what it does not, and what you can do about it. It is written to be read rather than to be defensible, so if anything here is unclear, say so and it will be rewritten. Who is responsible for the site is set out under who is responsible.

The short version

• There is no account system, so there is nothing to sign up for.
• The colors you type are processed to build the page and are not stored.
• No advertising, no analytics and no third party scripts of any kind run on this site today.
• Nothing is ever sold, rented or shared for marketing.

Who is responsible

The data controller for this site is Mian Zaka, operating from Pakistan. You can reach us at hello@toolquilt.com.

What the site collects

Things you type into the tools

The palette generator, contrast checker, converter and gradient builder all put their state in the page address so a result can be bookmarked and shared. Those values reach the server as part of the request, are used to render the page, and are not written to any database. They may appear in ordinary web server access logs, described below.

Things you send us deliberately

If you use the contact form, we store the name, email address, topic and message you submit, along with the time and the originating IP address. The IP is kept only so abuse can be dealt with. We keep messages for as long as it takes to deal with them and then delete them, and in any case no longer than 24 months. The legal basis is legitimate interest in answering correspondence.

Server logs

Like every website, the server that hosts this one records requests: the IP address, the time, the page requested, the referring page and the browser's user agent string. These logs exist for security and debugging, are not used to build a profile of you, and are rotated on the host's normal schedule.

What is never collected

No name, address, phone number, payment detail or government identifier is ever asked for, because nothing here needs one. There is no fingerprinting script, no session recording and no tracker that follows you across sites.

Cookies and browser storage

The full inventory is on the cookie policy. In summary:

• Theme preference. A single localStorage entry recording whether you chose the light or dark theme. It never leaves your device and is not a cookie.
• Security cookies. If you submit the contact form or sign in to the administration area, the framework sets a CSRF token and a session cookie. They are strictly necessary and carry no advertising value.

Advertising

This site currently shows no advertising and sets no advertising cookies. If that changes, this section will be replaced with the specifics (who the advertising partner is, which cookies they set and how to opt out), and the date at the top of this page will change with it.

Analytics

There is no analytics package on this site. No Google Analytics, no alternative, no pixel. Page popularity is inferred, when it is inferred at all, from ordinary server logs.

Who your data is shared with

Nobody, other than the infrastructure needed to run the site: the hosting provider that operates the server, and the mail provider that delivers a contact form notification to us. Neither is permitted to use your data for their own purposes. Nothing is sold.

International transfers

The server may sit in a different country from you. Where data leaves the European Economic Area or the United Kingdom, it is covered by the standard contractual clauses our providers operate under.

Your rights

Depending on where you live, you have some or all of the following rights over personal data we hold about you:

• Ask what we hold and receive a copy of it.
• Have inaccurate data corrected.
• Have it deleted.
• Object to or restrict how it is used.
• Have it sent to you or another provider in a portable format.
• Withdraw consent, where consent was the basis for using it.

In practice the only personal data this site holds is a contact form message, if you sent one. Email hello@toolquilt.com and it will be deleted, normally within a few days and always within one month. There is no charge.

If you are in the UK or the EEA and you think we have handled your data badly, you may complain to your national supervisory authority. We would rather you told us first.

If you are in California

We do not sell or share personal information as those terms are defined by the CCPA and CPRA, and we do not knowingly collect personal information from anyone under 16.

Children

This site is not aimed at children and does not knowingly collect data from anyone under 16. If you believe a child has sent us something, email us and it will be removed.

Security

The site is served over HTTPS, sets a strict transport security header, blocks framing and content type sniffing, and stores no credentials of yours because it never asks for any. No system is perfectly secure, but there is very little here worth stealing.

Changes to this policy

When this policy changes, the date at the top changes with it. Material changes, such as a new advertising partner or a new category of data, will be summarized at the top of the page for at least 30 days.

Getting in touch

Questions about this document go to the contact page, or straight to hello@toolquilt.com.