🔒 Privacy Summary: ToolVera processes images through a secure Express.js server proxy. Images are held in server RAM only for the duration of the API call (typically 1–3 seconds) and are never written to disk or stored permanently. We do not sell your personal data.
1 Information We Collect
When you use ToolVera, we may collect the following types of information:
- Usage Data: IP address, browser type, operating system, pages visited, time and date of visits, and referring URLs — collected automatically via server logs.
- Image Metadata: When you use our AI Background Remover, basic metadata (file name, file size, MIME type) is stored in a short-term in-memory log on our server for usage analytics. This log resets whenever the server restarts and holds a maximum of 200 entries.
- Contact Information: If you contact us via the contact form or email, we collect your name and email address.
- Cookies: Small text files stored in your browser for functionality and advertising purposes (see Section 4).
2 How We Use Information
We use collected information to:
- Operate and improve our image processing tools
- Monitor usage patterns and prevent abuse (rate limiting: 20 requests/hour per IP)
- Respond to support requests and enquiries
- Display advertisements via Google AdSense
- Analyse website performance and optimise user experience
- Comply with legal obligations
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
3 Image Data & Processing
This section explains exactly what happens to images you upload:
- AI Background Remover: When you upload an image, it is sent via HTTPS to our Express.js server. The server uses
multer.memoryStorage() to hold the image entirely in RAM — it is never written to disk. The image is then forwarded to the Remove.bg API, which returns the processed result. The result is returned to your browser as a base64-encoded PNG. After the response is sent, the memory buffer is garbage-collected automatically.
- Image Resizer & Converter: These tools process images entirely within your browser using JavaScript Canvas API. Your images are never sent to our server for these tools — all processing is local to your device.
- Retention: We do not store image files. The server maintains only a short-term in-memory log of metadata (file name, size, format, IP, timestamp) for up to 200 recent requests. This log is ephemeral — it resets on server restart and is not persisted to any database or file.
- Third-Party Processing (Remove.bg): Images processed by the AI Background Remover are forwarded to the Remove.bg API. Remove.bg's own privacy policy applies to how they handle image data: remove.bg/privacy
4 Cookies & Tracking
ToolVera uses the following cookies:
- Functional Cookies: Store your theme preference (dark/light mode). These are essential for site functionality and do not contain personal data.
- Analytics Cookies: We may use Google Analytics to understand how visitors use our site. This helps us improve our tools.
- Advertising Cookies: Google AdSense uses cookies to serve personalised ads based on your browsing history. You can opt out via Google Ad Settings.
You can control and delete cookies through your browser settings. Disabling cookies may affect site functionality.
5 Advertising (Google AdSense)
ToolVera uses Google AdSense to display advertisements, which helps keep all tools free.
- Google may use cookies and web beacons to serve ads based on prior visits to our or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this and other websites.
- You may opt out of personalised advertising by visiting Google Ad Settings.
- For EU/EEA users: We comply with GDPR and obtain consent for personalised advertising where required by law.
6 Third-Party Services
ToolVera integrates the following third-party services:
- Remove.bg: AI background removal API. Images sent for processing are subject to Remove.bg's Privacy Policy.
- Google Fonts: Font files are loaded from Google's servers. Google may collect basic usage data per their privacy policy.
- Google AdSense: Advertising service that may use cookies for ad personalisation. Governed by Google's Privacy Policy.
ToolVera does not use Firebase, databases, or any cloud storage service. All server-side infrastructure is a self-hosted Express.js application.
7 Data Security
We implement industry-standard security measures including:
- HTTPS encryption for all data in transit between your browser and our server
- Remove.bg API key stored exclusively in the server's
.env file — never exposed in any HTML, JavaScript, or public file
- Images processed using
multer.memoryStorage() — held in RAM only, never written to disk
- Rate limiting (20 requests/hour per IP) to prevent abuse and spam
- HTTP security headers (Helmet.js): X-Content-Type-Options, X-Frame-Options, XSS protection
- CORS policy restricting API access to
toolvera.in only in production
While we strive to protect your information, no internet transmission method is 100% secure. We cannot guarantee absolute security.
8 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request information about what personal data we hold about you
- Deletion: Request deletion of your personal data (note: our in-memory log auto-resets and contains no persistent personal data)
- Opt-out of advertising: Opt out of personalised Google advertisements
- GDPR (EU/EEA): All rights provided under the General Data Protection Regulation
- CCPA (California): Rights under the California Consumer Privacy Act
To exercise any of these rights, contact us at [email protected]
9 Children's Privacy
ToolVera is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will promptly delete it. If you believe we may have such information, please contact us immediately at [email protected].
10 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of ToolVera after changes constitutes acceptance of the updated policy.