This Privacy Policy explains how ToolHunter ("we," "us," "our"), operated from Delhi, India, collects, uses, and protects personal information when you use toolhunter.io, wherever in the world you're visiting from. It lists every service that receives data when you use the site. By using ToolHunter, you agree to the practices described here. If you don't agree, please don't use the site.
2. Information We Collect
Account information: You don't need an account to browse. You do need one to submit a tool, and to save tools to your favorites or upvote them. When you create one, we store your email address. If you sign in with Google or GitHub, we receive your email address and the basic profile details that provider shares (such as your name and profile picture); we never receive your Google or GitHub password.
Tool submissions: When you submit a tool, we collect the details you enter about it and the email address you provide, and link the submission to your account.
Contact form messages: When you use the contact form, we collect your name, email address, subject and message.
Newsletter signups: If you sign up for the newsletter, we store your email address. We don't send a confirmation email, and we'll remove you on request.
Payment information: If you choose a paid listing, we email you payment instructions and the payment is processed by Razorpay. We never see or store your full card or bank details.
Spam-prevention data: When you submit a tool, send a contact message or sign up for the newsletter, we store a one-way (SHA-256) hash of your IP address with it, so we can limit how many submissions come from the same connection per hour. We don't store the IP address itself. This hash is pseudonymised, not anonymous: because the range of possible IP addresses is limited, a hash can in principle be matched back to the address it came from, so we treat it as personal data.
Usage data (Google Analytics): We use Google Analytics 4 to understand how the site is used — pages viewed, approximate location (country/city), device and browser type. How this works depends on your cookie choice; see Cookies and Similar Technologies below.
Error reports: When something breaks in your browser, an error report is sent to our error-monitoring service (Sentry): the error message, the page, and your browser and operating system. It is configured not to record your IP address or any cookies.
Technical data received by embedded services: When a page loads content from another service (listed under Third-Party Services), your browser connects to that service directly, which gives it your IP address, browser information and the page you're on.
3. How We Use Your Information
We use the information we collect to:
Create and manage your account, your saved tools and your upvotes
Understand how people use the site so we can improve it (Google Analytics)
Find and fix errors on the site (Sentry)
Prevent spam and abuse of our tool submission, contact and newsletter forms
We do not sell your personal information, and we don't use it for advertising.
4. Legal Basis for Processing (EU/EEA/UK/Switzerland visitors)
If you're located in the EU, EEA, UK or Switzerland, we process your personal data on these legal bases: your consent for analytics cookies (which you can withdraw at any time); performance of a contract or steps you've asked for — creating your account, reviewing your tool submission, a paid listing, replying to your message, sending the newsletter you signed up for; and our legitimate interests — keeping the site secure and free of spam, finding and fixing errors, and cookieless, aggregate measurement of how the site is used.
5. Cookies and Similar Technologies
When you first visit, we ask whether you accept analytics cookies. Until you accept — and after you decline — Google Analytics sets no cookies. In that state our Google tag still sends Google limited, cookieless signals about page visits (such as the page, the time and your browser type) under Google's Consent Mode, which Google uses for aggregate measurement. If you accept, Google Analytics also sets its own cookies (named _ga and _ga_*) to recognise repeat visits; these last up to two years.
We also store a few items in your browser's local storage, which are needed for the site to work and aren't used for tracking:
your cookie choice (th_cookie_consent)
your language preference (language)
your sign-in session, if you're logged in (set by Supabase)
a short cooldown after submitting a tool, to prevent accidental double submissions
your light/dark theme choice (theme)
the page to bring you back to after you sign up or sign in, kept for up to 24 hours and deleted once used
the tool details you'd entered, if you're asked to sign up or sign in before submitting — kept for up to 24 hours and deleted once they're restored to the form
Some embedded content sets cookies of its own: Google reCAPTCHA on the contact page, and YouTube when a blog post includes a video. We don't use cookies for advertising or cross-site tracking.
Changing your mind: you can accept or withdraw consent for analytics cookies at any time. Withdrawing turns analytics cookies off and deletes the Google Analytics cookies we've set.
Use the Cookie settings link at the bottom of any page to change your choice.
6. Third-Party Services
These services process data to run ToolHunter. Each has its own privacy policy governing how it handles that data:
Supabase — our database and sign-in provider: stores accounts, saved tools, tool submissions, contact messages and newsletter signups.
Vercel — hosts the website and receives the standard request data of every visit (IP address, browser, page).
Google Analytics — website usage analytics, as described under Cookies and Similar Technologies.
Google reCAPTCHA — protects the contact form from spam. It collects information about your device and how you interact with the page. Its use is subject to Google's Privacy Policy and Terms of Service.
Google and GitHub sign-in — if you choose to log in with them, they share your email address and basic profile details with us.
Google's website icon service — most tool logos are loaded from Google (google.com and gstatic.com), which receives your IP address and browser information when the images load.
Storyblok — the content system for our blog; blog posts and their images are loaded from Storyblok's servers.
YouTube — videos embedded in some blog posts are loaded from YouTube, which may set cookies and collect viewing data under Google's privacy policy.
Resend — delivers contact form messages to our inbox, so the content of your message passes through it.
Sentry — error monitoring, as described above.
Razorpay — processes payments for paid listings.
If we are ever acquired, merge with another company, or sell the business, your information may be transferred to the new owner as part of that transaction — we'll aim to notify users if this happens. We also disclose personal information if required by law, court order, or a legitimate law-enforcement request.
7. Data Retention
Account and saved tools: until you delete your account or ask us to.
Tool submissions and contact messages: as long as needed to handle them and keep a record of the listing or conversation, or until you ask us to delete them.
Newsletter signups: until you ask to be removed.
Spam-prevention IP hashes: kept with the submission, message or signup they belong to, and deleted along with it.
Error reports: kept by Sentry for a limited period and then deleted automatically.
Analytics data: kept by Google Analytics for the retention period set in our account, at most 14 months.
Where the law requires us to keep something longer, we will.
8. Your Rights
Regardless of where you're located, you have the right to:
Know why your personal data is needed, what happens to it, and how long we keep it
Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your account and associated data
Unsubscribe from the newsletter
Withdraw consent for analytics cookies (see Cookies and Similar Technologies)
If you're in the EU, EEA, UK or Switzerland, you additionally have the right to:
Data portability — request your data in a structured, commonly used format to transfer to another provider
Object to processing — object to us processing your data on legitimate-interest grounds; we will comply unless we have compelling legitimate grounds to continue
Lodge a complaint with your local data protection authority if you're unsatisfied with how we've handled your data
To exercise any of these rights, email contact@toolhunter.io and tell us who you are, so we can confirm we're not changing or deleting the wrong person's data.
9. Data Security
We take reasonable measures to protect your personal information, including access controls on our database, encrypted connections (HTTPS) throughout the site, and relying on the security practices of our infrastructure providers. However, no method of transmission or storage online is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
ToolHunter is not directed at individuals under 18. We do not knowingly collect personal information from children. If we learn we've collected data from someone under 18, we will delete it.
11. International Visitors
ToolHunter is operated from India, and your information may be processed and stored in India or in the countries where the services listed above operate their infrastructure. By using the site, you consent to this transfer and processing.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Continued use of the site after changes are posted means you accept the updated policy.
13. Contact Us
Questions about this Privacy Policy, or requests about your personal data, can be sent to contact@toolhunter.io.