Privacy policy

Privacy policy

Short version: Files you process never leave your browser. We use light, anonymous analytics and optional ads (after your consent) to keep the site free. Full details below.

Effective date: 18 May 2026 · Last updated: 18 May 2026

1. Who we are

Toolvana ("we", "us", "our") is a free, browser-based multi-tool website operated by Aravind Labs ("Operator") at https://toolvana.aravindlabs.tech. The Operator is based in India and reachable at hello@aravindlabs.tech.

2. What information we collect

We have intentionally designed Toolvana to collect as little as possible. Here is the complete list:

2.1 Information you actively provide

  • Files and text you process: These stay on your device. Tools run in your browser using JavaScript and never transmit your inputs to our servers (we don't have any). Verify this yourself in DevTools → Network tab.
  • Browser storage (localStorage / IndexedDB): Tools that save your preferences, notes, kanban boards, habit tracker entries, password vault, etc. store data in your browser only. We have no copy. Clearing browser data wipes this — there is no recovery.
  • Email contact: If you email us at hello@aravindlabs.tech, that email and any attachments are visible to us. We use them only to respond and don't add you to any marketing list.

2.2 Information collected automatically

  • Server access logs: Our web server (Caddy on a self-hosted VPS) records standard request metadata: IP address, timestamp, requested URL, referrer, user agent. These rotate every 7 days and are used only for troubleshooting and abuse prevention.
  • Anonymous usage counts: We may use a privacy-preserving analytics service (Plausible or self-hosted Umami) that records page views without cookies, without tracking individual users, and without sending data outside the EU/India. We do not use Google Analytics.

2.3 Information collected by third parties (only if you consent)

If you accept cookies on the consent banner, the following third parties may set cookies and process limited data:

  • Google AdSense: serves ads on browsing pages (home, sitemap, category lists). May use cookies for ad personalization, frequency capping, and fraud detection. Google's policy. You can opt out of personalized ads at Google Ad Settings.
  • Google Fonts: serves the Inter, JetBrains Mono, and Fraunces font files used on every page. Google may log standard request metadata.
  • jsDelivr / cdnjs / unpkg: CDN providers for some JavaScript libraries (pdf-lib, marked, transformers.js, etc.). They may log standard request metadata.
  • Pollinations.ai: free unauthenticated image and text generation service used by some AI tools. Only the text prompt is sent to Pollinations — never your input files. Pollinations does not require accounts or store personal data per their stated policy.
  • postalpincode.in: free India Post lookup API used by the PIN code lookup tool. The PIN code or post office name you type is sent to this service.
  • Google Input Tools: used by the Indic typewriter to transliterate roman text. Each word you type is sent for transliteration.

3. Cookies and similar technologies

By default, Toolvana itself sets no cookies. The consent banner is the first thing that may write to your browser, and only after you make a choice.

  • tv_consent — localStorage key that records your consent choice (accept / reject). No personal data, just "yes" or "no".
  • tv_theme — localStorage key for your light/dark mode preference.
  • Tool-specific localStorage — each tool may store its own settings (e.g. tv_habits, tv_kanban). These are listed transparently in each tool's interface.
  • Google AdSense cookies — set only if you accept on the consent banner. These are operated by Google, not us. They include identifiers like __gads, __gpi, IDE (DoubleClick) used for ad delivery and measurement.

You can revoke consent any time by clicking "Manage cookies" in the footer, or by clearing site data in your browser settings.

4. How we use information

  • To operate, maintain, and improve the site.
  • To diagnose and prevent technical problems.
  • To detect and prevent abuse, fraud, and security incidents.
  • To respond to your support emails.
  • (Only with consent) to show contextual or personalized ads via Google AdSense.

We do not sell your data. We do not share data with brokers. We do not profile you across other sites.

5. Advertising disclosures (AdSense)

When ads are enabled (with your consent), this site participates in the Google AdSense program. Per Google's requirements:

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites.
  • You may opt out of personalized advertising by visiting Google Ad Settings.
  • You may also opt out of third-party vendors' use of cookies for personalized advertising at aboutads.info or youronlinechoices.com.

For users in the European Economic Area, United Kingdom, and Switzerland, Google operates under contracts that include the IAB Transparency & Consent Framework. Ads will not be served until you provide consent.

6. Your rights

Depending on where you live, you may have one or more of the following rights:

6.1 European Union / EEA / UK (GDPR / UK GDPR)

  • Right to access, rectify, and erase data we hold about you.
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw consent at any time (use the "Manage cookies" footer link).
  • Right to lodge a complaint with a supervisory authority.

6.2 India (DPDP Act, 2023)

  • Right to be informed about your personal data being processed.
  • Right to correction and erasure.
  • Right of grievance redressal — contact us at hello@aravindlabs.tech.
  • Right to nominate another person to exercise your rights in case of death or incapacity.

6.3 California (CCPA / CPRA)

  • Right to know what personal information is collected.
  • Right to delete personal information.
  • Right to opt out of "sale" or "sharing" — note that we do not sell or share personal information.
  • Right to non-discrimination for exercising these rights.

To exercise any right, email us at hello@aravindlabs.tech with the subject line "Privacy Request". We respond within 30 days.

7. Data retention

  • Server access logs: rotated every 7 days, then deleted.
  • Email correspondence: retained for up to 2 years for support continuity, then deleted.
  • Your localStorage data: retained in your browser until you clear it.
  • Anonymous analytics: aggregated and retained indefinitely (no individual identifiers).

8. Children's privacy

Toolvana is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will delete it.

9. Security

The site is served over HTTPS (TLS 1.3) with HSTS enabled. The server is patched regularly. Because tool inputs never reach our server, there is no server-side breach risk for your files — the worst-case scenario is that a future bug could leak your localStorage data to a malicious script on the same page; we mitigate this with Content Security Policy headers and code review.

10. International transfers

Our server is hosted in India. CDN endpoints (Google Fonts, jsDelivr) and ad networks (Google AdSense) may transfer data outside your country. Such transfers rely on standard contractual clauses or equivalent safeguards.

11. Changes to this policy

We may update this policy as the site evolves or laws change. The "Last updated" date at the top reflects the most recent change. Material changes will be highlighted on the homepage for at least 14 days.

12. Contact

Privacy questions, requests, or complaints: