Privacy Policy
Effective date: April 7, 2026
Information we collect
Account data - When you create an account, we collect your email address and a hashed version of your password. If you sign in with Google, we receive your name and email from Google. We also store session tokens to keep you signed in and your AI Credits balance.
Purchase data - When you buy AI Credits, your payment is processed by Stripe. We do not receive or store your card number or billing details - those go directly to Stripe. We store a record of the transaction (amount, credits purchased, timestamp) linked to your account.
Tool input data - When you use AI-powered tools, your input is sent to our backend to process and generate the output. This data is not stored, logged, or used for any other purpose. It is discarded immediately after the response is delivered.
Plausible Analytics - We use Plausible Analytics to understand how visitors use OnlineToolkit. Plausible is privacy-friendly: it does not use cookies, does not collect personal data, and does not track you across sites. Only aggregated, anonymous traffic statistics are recorded.
Google AdSense - We display ads served by Google AdSense. Google may set cookies and collect usage data to serve personalized ads based on your browsing activity. You can review Google's data practices and opt out of personalized advertising via your Google account settings.
Sentry - We use Sentry for error monitoring and session replay. When an error occurs, Sentry may collect technical data including your IP address, browser type, and a recording of the session leading up to the error. This data is used solely to diagnose and fix bugs.
Feedback form - When you submit feedback, we collect the message you write and, optionally, your email address. If you are signed in, your email is associated automatically. This information is stored securely and used only to review and respond to your feedback.
How we use data
Account data is used to authenticate you, maintain your session, and track your AI Credits balance. Purchase records are kept for billing history and dispute resolution. Analytics data is used to understand overall traffic patterns and improve the site. Email addresses are never used for marketing without your explicit consent. We do not build individual user profiles or use your data for any purpose beyond what is described here.
Data retention
Account data (email, password hash, credits balance) is retained for as long as your account exists. Purchase records are retained for seven years to meet accounting and legal obligations. When you delete your account, your personal data is removed from our systems within 30 days, except where retention is required by law. Anonymised transaction records may be retained longer for accounting purposes.
Your rights
You have the right to access, correct, or delete the personal data we hold about you. To request a copy of your data or to delete your account, contact us at [email protected]. We will respond within 30 days. Note that deleting your account will also forfeit any unused AI Credits, which are non-refundable.
Third-party services
OnlineToolkit uses the following third-party services. Each has its own privacy policy governing how they handle data:
- Stripe - stripe.com/privacy
- Google AdSense - policies.google.com/privacy
- Plausible Analytics - plausible.io/privacy
- Sentry - sentry.io/privacy
Data sharing
We do not sell personal data. We do not share data with third parties beyond the services listed above.
Contact
If you have any questions about this privacy policy, contact us at [email protected].