Privacy Policy

Your privacy matters to us. This policy explains exactly what data we collect, why we collect it, and how you can control it. We keep it simple and honest.

1. What We Collect

We collect the minimum data needed to run our service:

• Anonymous usage analytics — which tools are opened and how often (no personal identifiers)
• Tool usage counters stored in your browser (localStorage) for rate-limiting on the free plan
• Email address and display name if you create an account
• Your IP address for security purposes (rate-limiting, abuse prevention) — not linked to your identity

2. What We Do NOT Collect

We do not collect, store, or sell:

• The content of text you type into our tools
• Files you upload — they are processed locally in your browser or deleted from our servers within 1 hour
• Your location beyond country-level (derived from IP for analytics)
• Any data from children under 13

3. How We Use Your Data

Data we collect is used exclusively to:

• Provide and improve our tools
• Enforce fair-use limits on the free plan
• Send transactional emails (password reset, billing receipts) if you have an account
• Detect and prevent abuse or fraudulent activity
• Understand aggregate usage trends (which tools are most helpful)

4. File Processing

Files uploaded for processing (images, PDFs, videos, etc.) are processed in your browser whenever possible. When server-side processing is required, files are automatically and permanently deleted within 1 hour of processing. We never read, share, sell, or analyze the content of your files.

5. Cookies

We use two categories of cookies:

• Essential cookies — required for login sessions, security tokens, and language preferences. These cannot be disabled.
• Analytics cookies (Google Analytics) — help us understand aggregate usage patterns. You can disable these in your browser settings or via the cookie banner.

6. Third-Party Services

We use trusted third-party services to operate:

• Stripe — payment processing for Pro subscriptions. Your card data goes directly to Stripe; we never see or store it.
• Google Analytics — anonymous usage statistics.
• Cloudflare — CDN, DDoS protection, and performance.
• Vercel — hosting and serverless functions.
• Supabase — account database (email, preferences). Data is stored in EU (Frankfurt) region.

7. Data Retention

We retain your data as long as your account is active. If you delete your account, all personal data is permanently erased within 30 days. Anonymous analytics data (no personal identifiers) may be retained indefinitely in aggregated form.

8. Security

We use industry-standard security practices: TLS encryption for all data in transit, encrypted passwords (bcrypt), regular security audits, and strict access controls. No system is 100% secure — if you discover a vulnerability, please report it to security@microtools.hub.

9. Your Rights

You have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and all associated data
• Portability — receive your data in a machine-readable format
• Objection — opt out of analytics tracking at any time

We comply with GDPR (EU), CCPA (California), and PIPEDA (Canada). To exercise any right, email privacy@microtools.hub — we respond within 30 days.

10. Children's Privacy

Micro-Tools Hub is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it immediately.

11. Changes to This Policy

We may update this policy as our service evolves. We will notify registered users by email of any material changes at least 14 days in advance. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions or concerns about this policy? Email us at privacy@microtools.hub. We take all privacy inquiries seriously and respond within 2 business days.