Skip to main content
Back to home

Privacy Policy

Last updated: April 2, 2026

1. Who We Are

ToolSpring ("we," "us," or "our") operates the website toolspring.co and provides free, browser-based video processing tools. For privacy-related inquiries, contact us at privacy@toolspring.co.

2. Data We Collect

We are committed to minimal data collection. Here is what we collect and why:

2.1 Video Files & Media

All video processing happens entirely in your browser using WebAssembly (ffmpeg.wasm). Your files are never uploaded to our servers or any third-party service. We do not access, store, or transmit your video files or their metadata.

2.2 Server Logs (Automatic)

Our hosting provider, Vercel, automatically collects standard server log data when you visit our site. This includes:

  • IP address
  • Browser type and version (user agent string)
  • Pages visited and timestamps
  • Referring URL

This data is collected automatically by the hosting infrastructure and is used solely for security monitoring and abuse prevention. Server logs are retained for up to 30 days.

2.3 Analytics Data

We use Plausible Analytics, a privacy-preserving analytics service based in the EU (Estonia). Plausible does not use cookies, does not collect personal data, and does not track users across websites. The data collected is limited to:

  • Page URLs visited
  • Referring website
  • Browser and operating system (generic, non-identifying)
  • Device type (desktop, mobile, tablet)
  • Country-level location (derived, not stored as IP)

All analytics data is aggregated and cannot be used to identify individual users. No personal data is retained by Plausible.

2.4 What We Do Not Collect

We do not collect:

  • Cookies of any kind (our analytics are cookieless)
  • Advertising identifiers or device IDs
  • Behavioral profiles or tracking data
  • Account information (we have no user accounts)
  • Payment information (our tools are free)

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process data on the following legal bases:

  • Legitimate Interest (Art. 6(1)(f)): Vercel server logs are processed for security monitoring, abuse prevention, and maintaining service availability. This is a necessary and proportionate measure to protect our service and users.
  • Legitimate Interest (Art. 6(1)(f)): Plausible analytics data is processed to understand aggregate usage patterns and improve our tools. Since Plausible is cookieless and collects no personal data, the privacy impact is minimal.

No consent-based processing is required at this time because we do not use cookies or collect data that requires consent under the ePrivacy Directive.

4. Third-Party Services

We share data with the following third-party service providers:

4.1 Plausible Analytics

  • Purpose: Privacy-preserving website analytics
  • Data shared: Aggregated, non-personal usage data (no cookies, no IP addresses stored)
  • Location: European Union (Estonia)
  • Privacy policy: plausible.io/privacy

4.2 Vercel Inc.

  • Purpose: Website hosting and content delivery
  • Data shared: Server logs (IP address, user agent, request data)
  • Location: United States
  • Privacy policy: vercel.com/legal/privacy-policy

We do not use any advertising networks and do not share your data with advertisers or data brokers.

5. International Data Transfers

Plausible Analytics: Data is processed within the European Union. No international transfer occurs.

Vercel: Server log data may be processed in the United States. Vercel participates in standard data protection mechanisms including Standard Contractual Clauses (SCCs) to ensure adequate protection for data transferred outside the EEA.

6. Data Retention

  • Vercel server logs: Retained for up to 30 days, then automatically deleted.
  • Plausible analytics: Only aggregate statistics are retained. No personal data is stored at any point.
  • Video files: Never leave your browser. No retention by us.

7. Your Rights

7.1 Rights Under GDPR (EEA Residents)

If you are located in the European Economic Area, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Restriction: Request that we limit how we process your data.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interest.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
  • Right to Lodge a Complaint: You may file a complaint with your local data protection supervisory authority.

7.2 Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

  • Right to Know: You may request the categories and specific pieces of personal information we have collected.
  • Right to Delete: You may request deletion of personal information we have collected.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Categories of personal information collected: Identifiers (IP address via server logs) and internet activity information (pages visited). These are collected automatically through standard web hosting infrastructure.

We do not sell or share your personal information. Since we do not display advertisements or work with data brokers, there is no sale or sharing of personal information as defined under the CCPA. No "Do Not Sell or Share" opt-out is necessary.

8. How to Exercise Your Rights

To exercise any of your privacy rights, contact us at privacy@toolspring.co.

We will respond to verifiable requests within 30 days (GDPR) or 45 days (CCPA). If we need additional time, we will inform you of the reason and extension period.

9. Cookies

We do not use cookies. Our analytics provider (Plausible) is entirely cookieless and does not store any data on your device.

For more details, see our Cookie Policy.

10. Children's Privacy

Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us at privacy@toolspring.co and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of the site after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: