Privacy Policy

1. Introduction

Welcome to QuickToolbox ("we", "our", "us", or "Service") operated by InnowebNZ. We are committed to protecting your privacy and ensuring complete transparency about how we handle information when you use our website at quick-toolbox.com.

This Privacy Policy explains our privacy-first data practices and your rights regarding any information that may be collected when you use our 80+ free online tools including calculators, converters, generators, entertainment tools, and community features.

2. Information We Collect

2.1 Personal Information

All Tool Categories (80+ Tools): We do NOT collect, store, or transmit any personal data from any of our tools including calculators, converters, generators, entertainment tools, or utilities. All processing is performed locally in your browser using client-side JavaScript. Your input data, calculation results, and tool interactions never leave your device or reach our servers.

Community Features: When you use our Community platform, we collect limited personal information necessary for account functionality and moderation:

• Email Address: Required for secure authentication and account management
• Display Name: Optional name shown with your community contributions
• Authentication Data: Secure user hash (anonymized) for rate limiting and vote tracking
• Account Metadata: Registration date, last activity, account status

2.2 Automatically Collected Information

We automatically collect limited, non-personal information to improve our services:

• Usage Analytics: Page views, session duration, click events (via Google Analytics)
• Technical Data: Browser type, device type, screen resolution, operating system
• Network Data: IP address (anonymized), referrer URL, geographic location (country/city level)
• Performance Data: Page load times, Core Web Vitals metrics

2.3 Community Content

When you submit content through our Community features, we collect and store:

• Feature Requests: Title, description, category, priority, and user preferences
• Bug Reports: Issue description, steps to reproduce, tool name, severity level, browser information
• User Feedback: Tool ratings, feedback text, and usage experience
• Voting Activity: Records of votes cast on feature requests (anonymized user hash)
• Interaction Data: Submission timestamps, user activity patterns for moderation

2.4 Enhanced Conversions Data Collection

We use Google Ads Enhanced Conversions to improve ad attribution and campaign performance while maintaining strict privacy protection. This involves collecting and processing certain first-party data when available:

• Hashed User Data: Email addresses and names (when provided through community features or contact forms) are SHA-256 hashed client-side before any transmission
• Community Interactions: When you use community features (feedback, feature requests), email data is hashed for conversion attribution
• Browser Storage: Anonymized conversion data is temporarily stored in your browser's localStorage for attribution purposes only
• Conversion Events: We track page views, tool usage sessions, community interactions, and form submissions with enhanced data when available
• Privacy-by-Design: All personal data is cryptographically hashed using SHA-256 before any external transmission
• Multiple Opt-out Options: Disable through browser privacy settings, ad blockers, Do Not Track signals, or Google's ad personalization controls
• Tool Usage Tracking: We track which tool categories are most popular (calculators, converters, entertainment) without storing personal calculation data

2.5 Cookies and Local Storage

We use cookies and local storage responsibly for essential functionality and user experience enhancement:

• Essential Cookies: Remember your preferences (dark/light theme, favorite tools, tool settings, display mode)
• Authentication Cookies: Maintain secure user sessions for Community features with automatic expiration
• Analytics Cookies: Google Analytics tracking for understanding tool usage patterns (can be opted out via browser settings)
• Advertising Cookies: Google AdSense for displaying relevant advertisements that support our free tools
• Conversion Tracking: Google Ads conversion tracking and Enhanced Conversions with hashed data
• Traffic Validation: Session storage for detecting and preventing automated or suspicious traffic patterns to protect ad quality
• Local Storage: Save your favorites list, tool preferences, todo list items, recent tool history, and anonymized conversion data
• Performance Optimization: Cache frequently used tool data and settings for faster loading
• User Experience: Remember your preferred view modes (table vs grid), sorting preferences, and accessibility settings

3. How We Use Information

We use collected information solely for:

• Service Operation: Providing, maintaining, and continuously improving our 80+ free tools across all categories
• Community Management: User authentication, content moderation, spam prevention, and maintaining a quality feedback environment
• Tool Development: Prioritizing new tools and features based on community requests, usage analytics, and user feedback
• Usage Analytics: Understanding which tool categories are most popular, user journey patterns, and feature usage to enhance user experience
• Performance Optimization: Monitoring site performance, tool loading times, and fixing technical issues for better user experience
• Security & Abuse Prevention: Preventing misuse, maintaining reasonable rate limits, detecting automated traffic, and ensuring platform security and stability
• Advertising Revenue: Displaying relevant, non-intrusive ads through Google AdSense to support our free tool ecosystem
• Conversion Attribution: Measuring advertising campaign effectiveness through Google Ads Enhanced Conversions for service sustainability
• User Experience Research: Understanding user preferences, tool effectiveness, and areas for improvement
• Quality Assurance: Using community bug reports and feedback to identify, prioritize, and fix issues across all tool categories

We do NOT:

• Sell, rent, or share your personal data with third parties (except as described below)
• Store your calculation inputs or results
• Send unsolicited marketing emails, promotional communications, or spam
• Share community content publicly with personally identifiable information or without proper anonymization
• Use community feedback for purposes other than service improvement

4. Third-Party Services

4.1 Google Analytics

We use Google Analytics to understand how visitors interact with our site. Google Analytics collects information anonymously and reports website trends without identifying individual visitors.

Data Collected: Page views, session duration, tool usage patterns, user journey flows, device type, and general demographic information (when available)

Tool Analytics: We track which tools are most popular, session length on different tool categories, and general usage patterns without collecting personal calculation data

Opt-out Options: Use the Google Analytics Opt-out Browser Add-on, enable Do Not Track in your browser, or use ad blockers

4.2 Google AdSense

We use Google AdSense to display advertisements that help support our free tools. These ads may be personalized based on your interests.

Ad Targeting: Google may use cookies and browsing history to serve relevant ads based on your interests and visits to our site and other sites

Ad Revenue Purpose: Advertisement revenue directly supports our ability to provide 80+ tools completely free without subscription fees or premium tiers

Ad Control Options: Visit Google Ad Settings to manage preferences, disable personalized ads, or opt out of interest-based advertising

4.3 Google Ads Enhanced Conversions

We use Google Ads Enhanced Conversions to improve the accuracy of our conversion measurement and optimize ad campaigns:

• Purpose: Better attribution of conversions to ad clicks for improved campaign performance
• Data Processing: First-party user data is hashed using SHA-256 before being sent to Google
• Data Types: Email addresses, names (when provided through forms or authentication)
• Privacy Protection: All personal data is cryptographically hashed client-side to protect privacy
• Compliance: Fully compliant with Google's Enhanced Conversions privacy requirements
• Control: You can opt-out through browser settings, ad blockers, or Google's ad personalization controls

4.4 Firebase (Google Cloud)

We use Firebase services for Community feature data storage and authentication:

Services Used: Firebase Realtime Database for community content, Firebase Authentication for secure user sessions

Data Stored: Community feature requests, bug reports, user feedback, voting records, and authentication tokens

Security Measures: All data is encrypted in transit and at rest, with strict access controls, rate limiting, and automated abuse prevention

Data Location: Community data is stored in Google Cloud servers with appropriate regional compliance and data residency requirements

Data Retention: Community content is retained for service improvement while authentication data follows our retention schedule

4.5 External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of these sites and encourage you to read their privacy policies.

5. Data Security and Retention

We implement appropriate security measures to protect information:

• Technical Safeguards: HTTPS encryption, secure hosting infrastructure
• Access Controls: Limited access to any collected data with role-based permissions
• Data Minimization: We collect only what's necessary for service operation
• Authentication Security: Secure user hashing, rate limiting, and fraud prevention
• Input Sanitization: All community inputs are sanitized to prevent malicious content

5.1 Data Retention Periods

• Analytics Data: Retained according to Google Analytics settings (maximum 26 months) for usage pattern analysis and tool improvement
• Community Content: Feature requests and feedback retained indefinitely for service improvement, fully anonymized upon account deletion
• User Account Data: Active while account exists, completely deleted within 30 days of account termination request
• Authentication & Security Logs: Retained for 90 days for security monitoring, abuse prevention, and debugging
• Tool Usage Data: Aggregated usage statistics retained indefinitely for service improvement (no personal data)
• Rate Limiting & Abuse Prevention: Reset daily, permanently deleted after 30 days maximum
• Error & Performance Logs: Retained for 30 days for debugging and service improvement purposes

6. Your Rights and Choices

6.1 Cookie Management

You can control cookies through your browser settings:

• Block all cookies (may affect site functionality)
• Block third-party cookies only
• Clear existing cookies
• Set preferences for future cookies

6.2 Do Not Track

We respect Do Not Track signals and will not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place.

6.3 Community Account Rights

If you have a Community account, you have comprehensive control over your data:

• Account Deletion: Completely delete your account and anonymize all your community contributions with immediate effect
• Data Export: Request a complete copy of your community content, voting history, and account data in machine-readable format
• Content Management: Edit, update, or delete your own feature requests, bug reports, and feedback at any time
• Privacy Controls: Control visibility of your display name, email, and contribution history
• Voting Privacy: Your voting records are anonymized and cannot be traced back to your account
• Communication Preferences: Complete control over any account-related communications or notifications
• Data Portability: Export your data for use with other services while maintaining format compatibility

6.4 Data Subject Rights (GDPR)

If you are in the European Union, you have the right to:

• Access: Request information about data we may have collected
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (right to be forgotten)
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to data processing for legitimate interests
• Restrict Processing: Request limitation of processing under certain circumstances

7. International Data Transfers

Our services are hosted globally, and data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers, particularly when transferring data from the EU/EEA.

8. Children's Privacy (COPPA Compliance)

Our services are not directed at children under 13 years old. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at innoweb.it@gmail.com and we will promptly delete such information.

9. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Non-Discrimination: We won't discriminate for exercising your rights

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Post a notice on our website for significant changes
• Continue to honor your data according to the policy in effect when it was collected

We encourage you to review this policy periodically to stay informed about how we protect your privacy.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: innoweb.it@gmail.com
• Website: Contact Form
• Response Time: We aim to respond to all privacy inquiries within 30 days

12. Legal Basis for Processing (GDPR)

Our legal basis for processing information includes:

• Legitimate Interests: Improving our services, user experience, and advertising attribution through Enhanced Conversions
• Consent: When you accept cookies, opt-in to data processing, or provide data through forms
• Performance of Contract: Providing the requested tools and services
• Legal Obligation: Complying with applicable laws and regulations

12.1 Enhanced Conversions Legal Basis

For Enhanced Conversions data processing, our legal basis is:

• Legitimate Interest: Measuring advertising effectiveness and improving campaign performance
• Data Minimization: Only processing minimal data necessary for conversion attribution
• Privacy by Design: Using SHA-256 hashing to protect personal data before transmission
• Consent Mechanism: Respecting browser Do Not Track signals and providing clear opt-out options
• Purpose Limitation: Data used exclusively for advertising attribution, campaign optimization, and service sustainability