Privacy policy

Last updated: 30 September 2026

The short version

• Your files never leave your device. Every tool runs in your browser. No file name, type, size or content is ever sent to us.
• You can use ToolRecipe without an account. If you make one, we store your email address and what the account needs to work (see below).
• No ads, no tracking, no third-party scripts, and no cookies except the one that keeps you signed in.
• Our statistics are counts that can't be linked to you.

Who is responsible

The operator named in the legal notice is the controller under the GDPR. For anything about your data, write to the address given there.

Using the tools

The tools work inside your browser. A security policy stops the page from sending anything to any other address, and the counter at the top of the page shows that. Results stay in your browser's storage until you clear them. The browser also keeps a few settings there: your colour theme, language, favourite tools, whether you've seen the intro, and the anonymous counts described under “Statistics”. So that the site opens without a connection, the browser also keeps a copy of the site's own files (never your files); “Remove offline copy” at the bottom of the home page deletes it. None of this reaches us unless it's listed on this page.

Visiting the site

Our host, World4You Internet Services GmbH (Linz, Austria), keeps a standard access log for each request: IP address, time, address requested, referring page and browser. World4You deletes these logs after 14 days. We need them to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR).

Once a night we count page views from that log: per day, page, language, referring website (only its name, never the full address), campaign tags in the address (utm_source, utm_medium, utm_campaign) and country. The IP address is only used to look up the country in a file on our own server. We never store it, and we store neither the browser details nor anything else that could identify you. We keep no copy of the log.

Your account

An account is optional. It lets you save more files per day, keep pinned tools on every device, and send files with “Send files”. There are no passwords: you sign in with a link or code we email you.

We store (performance of a contract, Art. 6(1)(b) GDPR):

• your email address, and a keyed hash of it;
• a random account id, when the account was created and when you last signed in;
• your sign-ins (a hash of the sign-in cookie, and when it was made and last used);
• how many files you saved per day (a number, never what the files were), kept for 30 days;
• the tools you pinned;
• your plan, and the status of a subscription or order if you buy Pro.

While you sign in we store your email address with hashed copies of the link and code. They are deleted a day after they expire. We send the sign-in email through World4You's mail server.

To stop sign-in floods, we count attempts under a keyed hash that changes every day; the key is deleted after two days. We don't store IP addresses for this.

When you sign up we count the sign-up for that day, with the first page you saw and the campaign tag of that visit. This count has no link to your account.

We keep an account until you ask us to delete it. Write to us from the account's email address and we delete it and everything linked to it within 30 days.

Cookies

Signing in sets one cookie. It holds a random value and lasts 30 days from the last time you used it, and at most 90 days after you signed in. It is strictly necessary to keep you signed in, so it needs no consent banner. It is only sent to this site. Signing out deletes it. Without an account, ToolRecipe sets no cookies.

Send files

“Send files” sends files straight from one browser to another, end-to-end encrypted. The key is only in the link you share, so we can't read the files. To connect the two browsers our server passes their connection messages for up to 10 minutes; these contain the two devices' network addresses. We delete them as soon as the browsers are connected, or after 10 minutes. We also note which account opened the transfer and count transfers per account per day (kept 30 days) for the daily limit. If a direct connection isn't possible, the encrypted data passes through our relay server, which can't read it.

Statistics

To learn which tools are useful, your browser counts per day how often each tool was opened and saved from, and which searches found nothing. Search words are only kept when they are short and contain no digits or “@” (so no numbers or addresses). Once a day it sends the previous day's totals to us, without a cookie or any id. We store them per day and tool, with no link to you or your account (legitimate interest, Art. 6(1)(f) GDPR).

Payments

Pro is not on sale yet. When it is, this section will name the payment provider and what it receives. We will never see or store your card details.

Who else gets your data

Only World4You, as our host and mail server (a processor under Art. 28 GDPR, in Austria). We sell and share nothing, and no data leaves the EU.

Your rights

You can ask us for a copy of your data, and have it corrected, deleted, restricted or handed to you in a machine-readable form. You can object to processing that rests on legitimate interest. Write to the address in the legal notice. If you think we handle your data wrongly, you can complain to the Austrian data protection authority (Datenschutzbehörde, dsb.gv.at) or the one where you live.

Changes

If this policy changes, the new version appears here with a new date. If a change matters for your account, we tell you by email first.