EN

Privacy policy

1. Controller

The controller responsible for data processing on this website (ToolboxDay) within the meaning of the General Data Protection Regulation (GDPR) is:

SaracAI
Einzelunternehmen, Inhaber: Yusuf Fuat Sarac
Yusuf Fuat Sarac
Trifelsstraße 2
60528 Frankfurt am Main
Germany
Email: info@saracai.de

2. Summary

  • There are no user accounts and no forms. We do not set any cookies ourselves.
  • All calculations run entirely in your browser. Your input is not transmitted to us; so that it is back on your next visit, your browser keeps it locally (section 6).
  • Camera, microphone and screen are only used after you allow it in your browser; images and sound stay on your device (section 5).
  • Fonts, word lists and other data are loaded exclusively from our own domain; no external fonts or third-party content delivery networks are used.
  • The pages are delivered via Cloudflare. For audience measurement we use the cookieless Cloudflare Web Analytics.
  • Once Google AdSense advertising is displayed, cookies and similar technologies for advertising purposes are used only with your consent.

3. Hosting and delivery via Cloudflare

This website consists of static pages delivered via the infrastructure of Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; Cloudflare Workers and content delivery network). When a page is requested, Cloudflare processes technically necessary data, namely your IP address, the time of the request, the requested address (URL), your browser identifier (user agent) and the previously visited page (referrer). This processing serves to deliver the website and to defend against attacks and misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, quickly and reliably. We have concluded a data processing agreement (Data Processing Addendum) with Cloudflare pursuant to Art. 28 GDPR.

Data may be transferred to the USA in this context. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision pursuant to Art. 45 GDPR.

We do not keep any server log files ourselves.

4. Audience measurement with Cloudflare Web Analytics

We use Cloudflare Web Analytics, a service of Cloudflare, Inc. (address see above), to evaluate the use of our website in aggregated form. For this purpose, a script is loaded from static.cloudflareinsights.com. Aggregated information is collected, such as page views, referring pages (referrer), country, device type and loading times.

Cloudflare Web Analytics works without cookies and without fingerprinting and does not store any information on your device. Individual visitors are not recognised and are not tracked across websites.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring the reach and technical quality of the website and improving our service. With regard to third-country transfers and data processing, the information in section 3 applies.

5. Calculations in the browser and shared links

All calculations take place exclusively in your browser. Your input is not transmitted to us and is not stored by us.

So that you can share a result as a link, your input is written into the address bar (URL) as parameters. When someone opens such a link, the host (Cloudflare) sees the full URL including these parameters, just as with any other request (see section 3). Whether and with whom you share a link is entirely your decision.

The “Share” button opens your operating system's share dialog on mobile devices, otherwise a selection (WhatsApp, Telegram, X, email, copy link). Only when you click a target there are the prepared text and the link passed to that service; its privacy policy then applies. We store nothing in the process and do not embed any scripts from these services. With “Share as image”, a result card is created only in your browser and is not transmitted to us.

Camera, microphone, screen recording, text to speech and text recognition

Some tools (mic test, webcam test, screen recorder, voice recorder, tuner) access your camera, microphone or screen – but only after you have explicitly allowed this in your browser's prompt. Images, sound and recordings are processed exclusively locally in your browser and are not transmitted to us or to third parties. A recording is only saved on your device if you download it yourself. Access ends when you stop the test or leave the page; you can revoke the permission at any time in your browser settings. Keyboard, click and typing tests likewise evaluate your input only in the browser. The gamepad tester reads your controller only in the browser; sounds of the metronome, piano, noise generator, Morse code translator and speaker test are generated locally in your browser. "PDF to JPG" loads pdf.js from our own domain; your PDF never leaves your device.

Text recognition (image to text) runs entirely in your browser. The recognition program and the language data are loaded from our own domain; your image and the recognised text do not leave your device.

The read-aloud function uses the speech output of your browser or operating system. With locally installed voices, the text stays on your device. Some browsers additionally offer online voices (marked "Online" in the voice list, e.g. Google voices in Chrome or Microsoft online voices in Edge). If you choose such a voice, your browser sends the text to be read to the respective provider (Google or Microsoft); this transfer is made by your browser, not by us, and is subject to the browser provider's privacy policy. Where available, a local voice is preselected.

Video, PDF editing, background removal and stickers

Compress video and Trim video process your video file only in your browser (WebCodecs, Mediabunny); nothing is uploaded or stored. Edit PDF processes your PDF only in your browser (pdf.js, pdf-lib); nothing is uploaded or stored. Only for special characters is the Noto Sans font loaded from this website. PDF to DOCX processes your PDF only in your browser; for scanned pages the text recognition (Tesseract.js) loads its program and language files from this website and caches the language data in your browser's IndexedDB.

Background remover and sticker maker: your photo is processed only in your browser and never uploaded. Once, the page loads the AI model (approx. 60 MB) and the ONNX Runtime from this website and stores the model in the browser's cache storage (nametoolboxday-hintergrund-v1); you can delete it via your browser's site data. For chess against the computer, the chess engine is loaded from this website with the computer's first move and runs in your browser.

Location and motion sensors

The prayer times, sun position, moon calendar, compass, altimeter, GPS coordinates and GPS speedometer tools only request your location after you click, via your browser's Geolocation API. The compass, spirit level and protractor read your device's orientation and motion sensors after you allow it. Location and sensor data are processed exclusively in your browser and are not transmitted to us or third parties. For prayer times and sun position, your browser remembers the chosen place (name, coordinates, time zone) under eingaben:gebetszeiten or eingaben:sonnenstand (section 6); the other tools do not store any positions.

Showing your own IP address and DNS lookups

When opened, the “What is my IP” tool queries the endpoint /api/ip on this website. It runs on Cloudflare (see section 3) and sends the IP address your request came from back to you for display only. We do not store or log it, and no cookies are set. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the function you have requested.

With the “DNS lookup” tool, your browser sends the domain you entered – only after you click – to the endpoint /api/dns on this website. It runs on Cloudflare (see section 3) and forwards only the queried host name and the record type via DNS over HTTPS to the public DNS service you selected: Cloudflare (1.1.1.1; Cloudflare, Inc., address see section 3) or Google Public DNS (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Your IP address and the technical details of your browser are not passed on to the DNS service; it receives the request from our server. We do not store or log the queried domain or your IP address, and no cookies are set; for the limit of 30 lookups per hour the server counts an irreversible hash of your IP in memory for at most one hour. Processing of the forwarded query by the DNS service is governed by the respective provider's privacy notice:Cloudflare 1.1.1.1and Google Public DNS. Both providers are certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in carrying out the lookup you initiated.

Website checkers (SEO analysis, redirect, header, robots.txt checker)

When you click, your browser sends the URL you entered to our server (Cloudflare Worker). It fetches the page as “ToolboxDayBot”, respects its robots.txt and returns only the analysis. URL and IP address are not stored; for the limit of 30 checks per hour the server counts an irreversible hash of your IP in memory for at most one hour. Legal basis is Art. 6(1)(f) GDPR (preventing abuse).

App (sharing to ToolboxDay, offline use)

Sharing to the installed app: If you have installed ToolboxDay as an app and send a file, text or link to ToolboxDay via ‘Share’, your browser’s service worker receives the content and stores it only in this browser’s storage (IndexedDB). Nothing is transmitted to our server. The content is deleted as soon as a tool opens it, after 10 minutes at the latest. Offline use: frequently used calculators are stored in your browser’s cache together with their program files after your first visit (at most 30 pages) so they work without a connection. Your inputs are not stored. You can remove this data at any time in your browser settings (clear site data).

Photo to artwork (AI style)

Your photo and your style image are processed only in your browser and never uploaded. On first use the page loads the computation library (approx. 6.6 MB) and the AI model (approx. 2.4 MB, plus approx. 9.4 MB for your own style image) once from this website. The model is verified by checksum and stored in your browser's cache storage (nametoolboxday-kunststil-v1), the library in the normal browser cache; both can be deleted via your browser's site data. Local storage (eingaben:fotokunststil) keeps only style, strength and size, never a photo.

File handover from the home page

If you drop a file into the drop area on the home page, its type is detected in your browser only. Your file is not uploaded: it stays in your browser's storage (IndexedDB) until the tool you chose opens it, and is then deleted immediately. The search also understands plain-language input locally in your browser, without sending anything to us or third parties.

6. Local storage (localStorage) and clipboard

This website creates only the following entries in your browser's local storage (localStorage), each only once you use the tool concerned:

  • Key eingaben:<tool> (e.g. eingaben:gluecksrad,eingaben:timer): what you entered in the form fields of a calculator or tool (e.g. amounts, settings, the list of a spinning wheel or a name picker), so that it is back on your next visit. Only values that differ from the default are stored, and only after you have typed something yourself. Not stored: passwords (password generator and checker), free text in the text tools (e.g. character counter, text compare, text to speech) and invoice data. "Reset inputs" deletes the entry of that tool.
  • Key zeitwidget:stoppuhr: start time, lap times and running state of the stopwatch, so that an ongoing measurement survives reloading or closing the tab. The entry remains until you reset the stopwatch.
  • Key punktezaehler: names and scores of the score counter.
  • Keys sudoku, sudoku:tag, spider, freecell, schach, tageswort:<language>, galgenmaennchen, tictactoe, wuerfelblock,dartzaehler, scoreboard, bingo:v1 and zeitwidget:schachuhr: game state, settings, names and scores of the respective game (sudoku, hangman, tic-tac-toe, dice score sheet, darts scorer, scoreboard, bingo cards, chess clock), so a game survives reloading.
  • Keys minensuche, spiel2048, solitaer, mahjong,nonogramm, vierinreihe, stadtlandfluss, flaggenquiz,aimtrainer and reaktionstest: settings, current game, best scores or times, level progress and (categories game) player names, categories and points of the respective game (mines, 2048, solitaire, mahjong, nonogram, four in a row, categories game, flag quiz, aim trainer, reaction time test).
  • Keys dame, blockpuzzle, tripeaks, pyramide,snake, muehle, schiebepuzzle and kalaha: settings, current game and best scores of the respective game (checkers, block puzzle, tri peaks, pyramid, snake, nine men's morris, sliding puzzle, kalah). For the sliding puzzle with your own photo, the photo is neither stored nor transmitted; it stays in the browser's memory for the current session only.
  • Keys schiffeversenken, fotopuzzle, hearts and tippspiel: settings, wins and best scores of the respective game (battleships, photo jigsaw, hearts, typing game), for the typing game also the local leaderboard with the name you entered. For the photo jigsaw, your photo is processed only in the browser's memory, neither stored nor transmitted.
  • Keys tagesraetsel, tagesraetsel:mini and nonogramm:tag: daily puzzles – which daily puzzles you solved on which day (date, time/points/guesses, whether with help) for streak, calendar and statistics, your mini crossword progress for the last 14 days and your progress in the daily nonogram.
  • Key einmaleins-v1: selected tables and learning progress of the times tables trainer.
  • Keys pixelart:v1 and zehnfinger:v1: your pixel art draft and your progress in the touch typing trainer.
  • Key vokabeltrainer-v1: your own word lists and study progress (Leitner boxes) of the vocabulary trainer.
  • Keys gaesteliste:v1 and hochzeitsbudget:v1: your guest list (names, RSVPs, meal choices, dietary restrictions) or the items of your wedding budget. The delete button in the respective tool removes the entry.
  • Key quizmaker:entwurf: the draft of your own quiz (questions and answers) in the quiz maker. A shared quiz link carries the quiz in the part after "#", which is not sent to the server.
  • Key rechnung-v1: details entered in the invoice generator – only if you expressly tick "Save my entries in this browser" there; unticked, nothing is stored.
  • Keys zeitwidget:rundenzaehler, gedaechtnistest and kopfrechnen: the lap counter state and your best scores.
  • Keys sitzplan:v1, kostenteilen:v1, zeitstrahl:v1, gantt:v1,stammbaum:v1 (names and life dates), kanban:v1, stundenplan:v1,zeichenbrett:v1, whiteboard:v1, mindmap:v1 and teleprompter:text: your own content in the respective tool (seating, expenses, plans, drawings, text). "Start over" or "Clear text" in the tool deletes the entry.
  • Keys lineal:kalibrierung and wasserwaage:nullpunkt: your calibration of the ruler or spirit level.
  • Keys dok-lebenslauf-v1, dok-anschreiben-v1, dok-angebot-v1, dok-lieferschein-v1, dok-quittung-v1, dok-mahnung-v1, dok-kuendigung-v1: your inputs in the document templates (CV, cover letter, quote, delivery note, receipt, payment reminder, cancellation letter) – only if you switch on “remember in browser”; a photo is never stored.
  • Key meine-toolbox:v1: “My Toolbox” – saved and recently used tools and your own countdowns. Everything stays in your browser and is never sent to a server; export, import and delete directly on the page.
  • Key lebenslage:<name> (e.g. lebenslage:umzug): the ticked steps of the life-event assistants, deletable via “Reset ticks”; nothing is transmitted.
  • Keys todoliste:v1 and umfrage:v1: your tasks in the to-do list and your own poll with the votes cast, stored only in your browser.
  • Keys notizblock:v1 and zeitwidget:wecker: your notes in the online notepad and the alarm times, labels and settings of the alarm clock, stored only in your browser. If you explicitly switch it on in the alarm clock, your browser also shows a notification; it is created on your device and no push service is used.
  • Key theme: your choice between light and dark colour scheme.

These entries never leave your device and are not transmitted to us or to third parties. Storing them is strictly necessary to provide the function you have expressly requested (the tool with your inputs, the colour scheme) and is therefore permitted without consent under § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can delete them at any time via your browser data; in private mode the browser deletes them when the window closes.

The "Share" button passes the link containing your inputs (see section 5) to your device's share menu or copies it to your clipboard. We neither receive nor store it in the process.

In addition, the "image to text" tool stores the language data downloaded on first use (public dictionary/model files, no personal data) in the browser database IndexedDB so that it does not have to be downloaded again on every visit. Your images and recognised texts are not stored there. You can delete this data at any time by clearing your browser data.

The website accesses your clipboard only when you press a copy button yourself; only the value displayed is copied.

Installable app and offline use (service worker)

So that you can install the website as an app on your home screen and open recently used tools without an internet connection, the website registers a so-called service worker (/sw.js) in your browser. It stores in your browser's cache storage (entries starting with tbd-) copies of at most 30 recently visited pages, their script and style files, the tool list used by the search and an offline notice page. Only the public pages are stored, exactly as every visitor receives them – no inputs, no results, no data about you. Requests to our interfaces (/api/…, e.g. your IP address), advertising, the consent dialogue and audience measurement are never stored; they always go straight to the network.

The cache never leaves your device. It serves only the offline/app function you use and is permitted without consent under Section 25(2) no. 2 TDDDG. You can remove it at any time via your browser data (“clear site data/cache”); when you uninstall the app, the browser usually deletes it as well. Your browser only shows the “Install as app” button if it supports installation; the installation itself is carried out by your browser or operating system.

“ToolboxDay” browser extension for Chrome

The “ToolboxDay” browser extension (Chrome Web Store) does not collect, store or transmit any personal data. It does not load any code or data from the internet: the tool list, timer, QR code, colour picker, random number and coin flip run entirely on your device. In detail:

  • Active tab (activeTab): Only when you open the QR code in the extension window does it read the address of the page currently open, to create a QR code locally. The address is neither stored nor transmitted.
  • Storage (storage): The extension's local storage in your browser holds only your chosen language, the section you last opened, the end time of a running timer and the colour you last picked.
  • Alarms and notifications (alarms, notifications): used to notify you when your timer has finished.
  • Colour picker: The selected colour value is only displayed or, if you wish, copied to your clipboard.

Only when you click a tool in the extension does the corresponding page on toolboxday.com open; from then on, this privacy policy applies to the website. We do not sell data and do not use it for advertising or creditworthiness checks. You remove the stored entries by uninstalling the extension.

Context menu and new tab page of the “ToolboxDay” extension

Context menu: only when you click a menu item does the extension pass the clicked image, the selected text or the link to the page toolboxday.com/…/teilen/. Text and link are placed only in the address fragment (#…), which browsers do not send to servers; the image is loaded by the extension and handed directly to that page in your browser as a message (cached for at most 5 minutes). None of this is transmitted to or stored on our server. For images on other servers, Chrome asks you for permission per website (or once for all); the optional new tab page is off by default and uses the “tabs” permission only to detect new empty tabs. Settings, countdowns, calculator and converter inputs and the stopwatch state are stored only in the extension's local storage.

“ToolboxDay Screenshot” browser extension for Chrome

The extension captures the current tab only after you click. The capture is processed locally only, stored briefly in the extension's IndexedDB and deleted once it has opened in the editor. No data is sent to us or third parties; no analytics, no account. Permissions: activeTab (capturing the clicked tab) andscripting (scrolling and temporarily hiding fixed elements for full-page captures).

Embeddable widgets (/embed/)

Operators of other websites can embed our widgets via iframe. When you visit such a website, your browser loads the widget from toolboxday.com; our host Cloudflare processes the technically necessary connection data as with any page request (including IP address, time, requested address, referrer), legal basis Art. 6(1)(f) GDPR. The widgets contain no advertising or analytics scripts and set no cookies; time widgets may store settings locally in your browser (localStorage).

7. Advertising with Google AdSense

Once advertising is displayed on this website, we use Google AdSense for this purpose, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Depending on your choice, Google may also serve personalised ads based on your interests.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. In addition to Google, cookies of other third-party vendors or ad networks may also be used; the vendors involved are listed by name in the consent dialog.

You may opt out of personalised advertising by Google at any time by visiting Ads Settings:https://adssettings.google.com(or https://www.google.com/settings/ads). You can also opt out of a third-party vendor's use of cookies for personalised advertising by visitingwww.aboutads.info or, in Europe,www.youronlinechoices.eu.

Cookies and similar technologies (e.g. device identifiers) are used for these purposes only if you have given your prior consent. Consent is obtained via Google's consent management tool ("Privacy & messaging"), a consent management platform certified under the IAB Transparency & Consent Framework (TCF). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

You can withdraw or change your consent at any time with effect for the future via the link or button of the consent management tool ("Privacy settings"). The lawfulness of processing carried out before withdrawal remains unaffected. Without consent, only non-personalised or limited ads may be served.

Data may be transferred to Google LLC in the USA in this context. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision pursuant to Art. 45 GDPR.

Further information:

8. Storage period

We do not store any personal data ourselves. The technical data arising at Cloudflare is stored only for as long as necessary for delivery, security and statistics, and is otherwise governed by Cloudflare's policies. The local storage entries remain until you reset them in the tool concerned or delete your browser data. Cookies related to advertising are subject to Google's retention periods; you can delete them in your browser at any time.

9. Your rights

With regard to personal data concerning you, you have the following rights against us:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal message to the email address given above is sufficient.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

10. No automated decision-making, no obligation to provide data

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR. You are under no statutory or contractual obligation to provide us with personal data. However, without the technically necessary connection data (section 3), the website cannot be delivered.

Last updated: 1 October 2026