Skip to content

TOOOLS.design 2.0 is live on Product Hunt today2.0 is live on Product HuntJoin the discussion

Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult the sections below.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How does TOOOLS.design record your data?

TOOOLS.design collects the data you share, for instance information you enter into one of the forms on this website or into the search.

Other data shall be recorded automatically by the IT systems of this website during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What is your data used for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact TOOOLS.design at any time if you have questions about this or any other data protection related issues.

Analysis tools and tools provided by third parties

When you visit this website, your browsing patterns are statistically analyzed with Google Analytics, and TOOOLS.design analyzes how the search is used in order to improve it. Some functions of this website also rely on services of third parties, for example the AI models behind the Tool Finder.

For detailed information about these analyses and services, please consult the sections below.

2. Hosting

Cloudflare

This website is hosted and delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as “Cloudflare”). When you visit this website, your browser connects to a Cloudflare server close to you. Cloudflare records technical data in log files, including your IP address, the page requested, the time of the request, and your browser type and operating system, and uses it also to fend off attacks and misuse.

Cloudflare is used on the basis of Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in a website that is as fast, reliable and secure as possible. Cloudflare is certified under the EU-US Data Privacy Framework (DPF), and TOOOLS.design has concluded a data processing agreement (DPA) with Cloudflare. For details, please consult the privacy policy of Cloudflare: https://www.cloudflare.com/privacypolicy/.

netcup

Parts of this website, such as the search and the processing of form submissions, run on a server in Germany that TOOOLS.design rents from netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany (hereinafter referred to as “netcup”). Your search input and form submissions are processed and stored on this server. This server does not receive your IP address.

netcup is used on the basis of Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in running these functions on infrastructure it controls. TOOOLS.design has concluded a data processing agreement (DPA) with netcup. For details, please consult the privacy policy of netcup: https://www.netcup.com/en/contact/data-privacy.

3. General information and mandatory information

Data protection

TOOOLS.design takes the protection of your personal data very seriously. Hence, it handles your personal data as confidential information and in compliance with the statutory data protection regulations and this Privacy Policy.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Privacy Policy explains which data is collected, how, and for which purposes.

TOOOLS.design herewith advises you that the transmission of data via the Internet (e.g., through email communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

Pascal Strasche, Arndtstr. 17, 04275 Leipzig, Germany
Email: hey@toools.design

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, email addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this Privacy Policy, your personal data will remain with TOOOLS.design until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless TOOOLS.design has other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

TOOOLS.design processes personal data on the following legal bases. Where you give your consent, for example when you subscribe to the newsletter, the processing is based on Art. 6(1)(a) GDPR, and you can revoke your consent at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, for example a sponsorship inquiry, the processing is based on Art. 6(1)(b) GDPR. If it is required for the fulfillment of a legal obligation, for example statutory retention periods, it is based on Art. 6(1)(c) GDPR. Other processing on this website is based on the legitimate interest of TOOOLS.design according to Art. 6(1)(f) GDPR. Entries that functions of this website store in your browser are necessary to provide those functions (§ 25 (2) no. 2 TDDDG). Information on the relevant legal basis in each individual case is provided in the following paragraphs of this Privacy Policy.

Information on data transfer to the USA and other non-EU countries

Among other things, TOOOLS.design uses tools of companies domiciled in the United States or in other non-EU countries. If these tools are active, your personal data may be transferred to these countries and processed there.

The European Commission has adopted an adequacy decision for the USA, the EU-US Data Privacy Framework (DPF). A transfer to a company in the USA that is certified under the DPF is based on this decision. Where a provider is not certified under the DPF, the transfer is based on the Standard Contractual Clauses (SCC) of the European Commission. TOOOLS.design must point out that in non-EU countries without an adequacy decision, a data protection level comparable to that in the EU cannot be guaranteed, and that authorities there may be able to access personal data. For each service, this Privacy Policy states where the data is processed and, where known, on which basis it is transferred.

Revocation of your consent to the processing of data

Where processing is based on your consent, you can revoke your consent at any time. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS PRIVACY POLICY. IF YOU LOG AN OBJECTION, TOOOLS.design WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS IT IS IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENSE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to demand that any data TOOOLS.design automatically processes on the basis of your consent or in order to fulfill a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact TOOOLS.design at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact TOOOLS.design at any time. The right to demand restriction of processing applies in the following cases:

  • In the event that you should dispute the correctness of your data archived by TOOOLS.design, it will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that TOOOLS.design restrict the processing of your personal data.
  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
  • If TOOOLS.design does not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
  • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and the rights of TOOOLS.design will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as form submissions or inquiries you send through this website, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to this website cannot be read by third parties.

Rejection of unsolicited emails

TOOOLS.design herewith objects to the use of contact information published in conjunction with the mandatory information to be provided in the Legal Notice to send it promotional and information material that it has not expressly requested. TOOOLS.design reserves the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

4. Recording of data on this website

Cookies and local storage

The cookies on this website are those of Google Analytics, which recognize repeat visits (see section 6).

Some functions store small entries in the local storage or the session storage of your browser. These entries stay on your device, and your browser does not send them to this website. Entries in the session storage are deleted when you close the browser tab; entries in the local storage remain until you delete them. The following entries are used:

  • “toools-nav” (local storage): whether you collapsed the sidebar.
  • “subscriber_email” (session storage): the email address you entered in the newsletter form, until the confirmation page has shown it.
  • “toools-take” (session storage): a question you asked in the search and its answer, so that the next page can show it; deleted once read, at the latest after ten minutes.
  • “toools-finder-take” (session storage): the last answer of the Tool Finder, so that a reload shows it again; no longer read after one day.
  • “toools-finder-threads” (local storage): the questions of your recent conversations with the Tool Consultant, so that you can reopen them.
  • “toools-thread” (session storage): the conversation you have open in the Tool Consultant, so that a reload shows it again; no longer read after one day.
  • “toools-quick” (session storage): the state of the quick search when you followed a link out of it, so that the Back button returns you to it; no longer read after one hour.

Storing these entries is necessary to provide the functions you use (§ 25 (2) no. 2 TDDDG). You can delete them at any time in the settings of your browser, for example by clearing the site data of this website.

Request by email

If you contact TOOOLS.design by email, your request, including all resulting personal data (name, request) will be stored and processed for the purpose of processing your request. TOOOLS.design does not pass these data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of the legitimate interest of TOOOLS.design in the effective handling of inquiries submitted to it (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you via contact requests remain with TOOOLS.design until you request their deletion, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Feedback form and tool submissions

On the feedback page you can report a problem or share an idea, and on the submission page you can suggest a tool for the directory. TOOOLS.design processes the data you enter there. On the feedback form, these are the type of report, your message, a link if you add one, and the page of this website you came from. On the submission form, these are the link, name, description and pricing of the tool and your message. On both forms, your email address is optional; if you give it, TOOOLS.design uses it to confirm receipt and to reply to you.

Your entries reach the TOOOLS.design server at netcup (see section 2) through the server-side function of this website at Cloudflare. From there they are stored in the TOOOLS.design workspace at Notion and sent by email to the TOOOLS.design mailbox, and if you gave an email address, you receive a confirmation email. The provider of Notion is Notion Labs, Inc., 685 Market St, San Francisco, CA 94105, USA (hereinafter referred to as “Notion”). Notion stores the data in the USA. The transfer is based on the Standard Contractual Clauses (SCC) of the European Commission, and TOOOLS.design has concluded a data processing agreement (DPA) with Notion. For details, please consult the privacy policy of Notion: https://www.notion.com/trust/privacy-policy.

The data is processed on the basis of Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in keeping the directory accurate, in reviewing tool suggestions and in answering you.

Feedback reports remain with TOOOLS.design until they have been handled. Tool submissions are kept as a record of the review. You can ask TOOOLS.design at any time to delete your email address or your whole submission. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Search and AI features

Search

When you use the search on this website, your input and the filters you select are processed on the TOOOLS.design server at netcup (see section 2) to find matching tools. This server does not receive your IP address.

The processing is based on Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in offering a fast search that helps you find the right tools.

AI features (Anthropic, OpenAI, OpenRouter, TypeSafe)

Some functions of the search use AI models of third parties. None of these providers receives your IP address. The results are generated automatically, are marked as such and can contain errors. Please do not enter any personal information in the search.

  • Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland (“Anthropic”) answers questions in the search and in the Tool Consultant and translates searches in other languages. It receives your question, matching tools of the TOOOLS.design catalog and, for follow-up questions, the earlier questions and answers of the conversation.
  • OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”) receives the search phrase to find tools that match its meaning.
  • TypeSafe AI, Inc., 255 California St, Suite 1300, San Francisco, CA 94117, USA (“TypeSafe”), reached through OpenRouter, Inc., 169 Madison Avenue, New York, NY 10016, USA (“OpenRouter”), receives your input to understand searches phrased as a question or a description.

To protect the answers from misuse, the number of questions per IP address is limited, using a pseudonymized value that is deleted after one day.

The processing is based on Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in understanding searches phrased in natural language and in answering them from its catalog.

The data may be processed in the USA. For Anthropic, OpenAI and OpenRouter, the transfer is based on the Standard Contractual Clauses (SCC) of the European Commission, and TOOOLS.design has concluded a data processing agreement (DPA) with Anthropic and OpenAI. TypeSafe processes the data in the USA. For details, please consult the privacy policies of Anthropic, OpenAI, OpenRouter and TypeSafe.

Search log

To improve the search, TOOOLS.design records how it is used: the search terms and filters, the results shown and the tools you click, the page of this website, the language setting of your browser, the time, and a random session ID that groups the searches of one visit and is not stored on your device. For questions, it also records how you continued after the answer and your feedback on it, if you give any. Please do not enter any personal information in a feedback note. IP addresses are not stored in the search log. The same applies to requests that an AI assistant sends through the TOOOLS.design MCP server (toools.design/mcp): the search terms, the number of results and the name of the assistant software are recorded; IP addresses are not stored. The entries are stored on the TOOOLS.design server at netcup (see section 2).

The processing is based on Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in learning which searches fail and which results help, so that the search can be improved. The log entries are kept only as long as they are needed for this purpose.

6. Analysis tools

Google Analytics

This website uses Google Analytics, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Analytics records how this website is used, for example the pages accessed, the time spent on them, the operating system and the approximate origin of visitors. This data is assigned to a random identifier stored in the cookies “_ga” and “_ga_” followed by the ID of the TOOOLS.design property, which recognize repeat visits and are stored for up to two years. For visitors from the EU, Switzerland and the UK, Google Analytics does not store IP addresses; it uses them only to derive the approximate location.

Google Analytics is used on the basis of Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in analyzing how this website is used, in order to improve it and to report its reach to sponsors. The data may be transferred to Google servers in the USA; Google LLC is certified under the EU-US Data Privacy Framework (DPF). TOOOLS.design has concluded a data processing agreement (DPA) with Google.

You can prevent the recording by Google with the browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=en. For details, please consult the information of Google on Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en.

7. Newsletter

Kit

The newsletter is sent with Kit, a service of Kit, Inc., 750 West Bannock Street #761, Boise, Idaho 83701-0761, USA (hereinafter referred to as “Kit”). When you subscribe, your email address is sent directly to Kit and stored there together with the time of your subscription and your confirmation. Your address is added to the newsletter list only after you confirm it through the email you receive (double opt-in).

Kit records whether a newsletter was opened and which links in it were clicked, together with technical data such as the time, your IP address and your browser, and assigns this to your subscription. TOOOLS.design uses this to learn which content its readers find useful. If you do not want this, you can unsubscribe at any time with the link in every newsletter.

The data is processed based on your consent (Art. 6(1)(a) GDPR), which you can revoke at any time by unsubscribing; processing that took place before your revocation remains lawful. Your data is stored until you unsubscribe. After that, your email address may be kept on a blocklist to prevent future mailings, based on the legitimate interest of TOOOLS.design in complying with the legal requirements for sending newsletters (Art. 6(1)(f) GDPR). You may object to this storage if your interests outweigh that interest.

Kit is certified under the EU-US Data Privacy Framework (DPF). TOOOLS.design has concluded a data processing agreement (DPA) with Kit. For details, please consult the privacy policy of Kit: https://kit.com/privacy.

8. Online marketing and partner programs

Affiliate Programs on this website

TOOOLS.design participates in affiliate partner programs. Some links on this website are affiliate links: if you click one and then buy or sign up on the website of the partner, TOOOLS.design receives a commission. To attribute the purchase or sign-up to TOOOLS.design, the link carries an identifier, and the partner or its affiliate network records the click on its own website, usually with cookies or similar technologies. TOOOLS.design sets no cookies for this on this website. The processing on the website of the partner is governed by the privacy policy of the respective partner.

Affiliate links are used on the basis of Art. 6(1)(f) GDPR. TOOOLS.design has a legitimate interest in the correct computation of its affiliate compensation, which helps fund this website.

TOOOLS.design 2.0 - Find the right design tool. Just ask. | Product Hunt