Privacy Policy

Last updated: November 2, 2026

Who is responsible?

The controller for the operation of ToolsBoXMachine (TBXM) is RackRunner (the publisher's online pseudonym), a non-professional individual publisher. Contact: rackrunner@tbxm.org.

The publisher's public identification details are set out in the Legal Notice. The site does not provide user accounts, a contact form, a newsletter, or advertising and analytics profiles.

What happens when you use the tools?

The tools are designed to run in your browser. Text, images, QR-code content, and passwords entered or generated by a tool are not sent to TBXM by the tool code. The Notes tool is an exception in that its notes are saved in your browser's local storage, not on TBXM's servers.

Browser-local storage is not encrypted by TBXM. Anyone with access to the same browser profile or device may be able to access it. Do not store sensitive information in Notes, particularly on a shared device.

Data stored on your device

  • Notes: note text, titles, folders, and related settings are stored in your browser's local storage so the Notes tool can save and restore them.
  • Pomodoro timer: session count and total focus time are stored locally to show your timer statistics.
  • Tool settings: the Notes tool stores selected preferences, such as word-count display and confirmation settings.

These values remain in your browser until you delete them in the tool or clear site data in your browser. They are not available to TBXM and are not transmitted to TBXM. Clearing the browser's site data can permanently delete them.

Server and network information

When your browser requests a page or file, the hosting and network providers necessarily handle technical connection information, which may include an IP address, request time, requested resource, browser information, and referrer information. This is used to deliver the site and protect its availability and security. TBXM does not operate analytics, advertising, or visitor-profiling software in the site code reviewed for this policy.

The site is hosted by OVHcloud. The actual logs, access, and retention periods depend on the hosting and network configuration and the providers' security and legal requirements. The publisher must verify the applicable settings and retention periods with OVHcloud; this policy does not claim that no provider-side logs exist.

Third-party technical services

  • jsDelivr: the QR-code page currently loads its QR-code JavaScript library from jsDelivr. Loading that file sends a request to the CDN, which can receive technical request information such as your IP address, browser, and the requested file/page. The current QR tool code processes the QR text and selected image in your browser; it does not send that content to jsDelivr. See the jsDelivr privacy policy. jsDelivr states that it may use CDN providers, including Cloudflare, Fastly, and Gcore, to deliver CDN traffic.
  • Cloudflare: used to manage the domain's DNS. If web traffic is proxied through Cloudflare in the DNS settings, Cloudflare may also handle website requests and associated technical information. The actual proxy setting must be checked in the Cloudflare account.
  • Spaceship: the domain-name registrar. It handles domain registration and account information; it is not the website host.
  • OVHcloud: the website host and the provider to contact about hosting-related records.

If you follow an external link, the destination service will receive the connection information needed to serve its page and will handle it under its own privacy terms.

Because these providers and CDN networks may operate in multiple countries, technical data may be processed outside the European Economic Area depending on the route and provider configuration. The exact locations and transfer safeguards must be checked against the current provider terms and account settings before relying on this notice.

Cookies and similar technologies

The site code reviewed for this policy does not use advertising or analytics cookies. The Notes and timer features use browser local storage as described above. Local storage is a technology on your device and is subject to rules that are distinct from the GDPR.

The local-storage entries are used for tool features, not for cross-site tracking. If a future feature uses a non-essential cookie or other device identifier, it must be assessed separately and, where required, blocked until valid consent is obtained.

Legal basis and retention

The limited technical processing needed to deliver and secure the site is based on the publisher's legitimate interest in operating and protecting the service. Browser-local data is kept on your device for the functionality you use and remains there until you delete it or clear the site's browser data. Provider-side technical data is retained according to the applicable provider settings and the time needed for security and legal requirements; the precise periods must be confirmed with the providers.

Your rights

Where the GDPR applies to personal data processed for the site, you may request access, correction, deletion, restriction, or object to processing, and may exercise portability rights where applicable. If a processing activity is based on consent, you may withdraw that consent at any time. Contact rackrunner@tbxm.org. Requests are normally answered within one month. For data stored only in your browser, use the tool's controls or clear this site's browser storage. You may also lodge a complaint with the French Data Protection Authority (CNIL).

TBXM does not use automated decisions or profiling in the site code reviewed for this policy.

Back to Home