DecoToolkit Logo

Privacy Policy

Last updated: July 8, 2026

1. Introduction

Welcome to DecoToolkit (https://decotoolkit.com).

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, browser-based tools, or developer API.

By using our website or services, you agree to the terms of this Privacy Policy.

2. Who We Are

DecoToolkit is an online platform providing browser-based tools and a developer API for developers, creators, and general users.

If you have any questions, you can contact us via our Contact page.

3. Data We Collect

We may collect the following types of data depending on how you use our services:

Technical Data (all visitors):

  • IP address
  • Browser type and version
  • Time zone and approximate location
  • Device and operating system

Usage Data (all visitors):

  • Pages visited
  • Time spent on pages
  • Interaction with tools and features

Account Data (registered users):

  • Email address
  • Authentication identifiers
  • Account creation date

API Data (API users):

  • API token metadata (token name if provided, creation date, last used date)
  • Active plan and credit balance
  • API usage counters and endpoint call history

Billing Data (paid plan users):

  • Subscription plan and billing status
  • Invoice and payment status
  • Stripe customer ID and subscription ID
  • Related billing metadata
  • Note: Full payment card details are handled by Stripe and are not stored by DecoToolkit.

Contact and Support Data:

  • Messages sent through our contact form
  • Subject and content of support requests

We do NOT collect sensitive personal data such as health, financial, or government ID information.

4. How We Use Your Data

We use your data to:

  • Improve website performance and usability
  • Analyze traffic and usage patterns
  • Create and manage user accounts
  • Authenticate users and maintain secure sessions
  • Generate and manage API tokens
  • Track API usage and monthly credits
  • Enforce plan limits and rate limits
  • Process subscriptions and billing via Stripe
  • Prevent abuse, fraud, and unauthorized access
  • Provide customer support
  • Improve tools and API reliability
  • Comply with legal, tax, and accounting obligations
  • Serve relevant ads via third-party providers (non-API visitors)

Legal bases (GDPR):

  • Contract performance — for accounts, API access, subscriptions, and billing
  • Legitimate interest — for security, abuse prevention, service improvement, and analytics
  • Legal obligation — for invoices, tax records, accounting, and compliance requirements
  • User consent — for non-essential cookies, personalized advertising, and marketing where applicable

5. File Processing and Security

Most browser-based tools process files locally in your browser.

When server-side processing is required:

  • Files are uploaded securely over an encrypted connection
  • File processing is temporary and strictly necessary to deliver the requested result
  • Files are automatically deleted after processing

We DO NOT:

  • Store your files beyond what is technically necessary for processing
  • Access, actively monitor, or inspect file contents
  • Share uploaded data with third parties
  • Claim ownership over any content you process

All responsibility for the content processed remains with the user.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Necessary cookies: for site functionality, login sessions, account management, API dashboard access, billing portal navigation, and security
  • Analytics cookies: to analyze traffic and improve performance
  • Advertising cookies: to deliver personalized ads via third-party providers

You can accept or reject non-essential cookies via the cookie consent banner or your browser settings. For full details, see our Cookie Policy.

7. Google AdSense and Advertising

We use Google AdSense to display advertisements on free tool pages.

Google and its partners may use cookies (including DoubleClick cookies) to:

  • Show ads based on your visits to this and other websites

Users may opt out of personalized advertising by visiting: https://www.google.com/settings/ads For more information: https://policies.google.com/technologies/ads

8. Payment Processing and Stripe

Paid API plans are processed through Stripe, a third-party payment provider.

DecoToolkit stores limited billing references (Stripe customer ID, subscription ID, plan status, invoice metadata) to manage your subscription.

DecoToolkit does NOT store full payment card numbers or sensitive card data.

Stripe processes payment and billing information according to its own terms and privacy policy, available at: https://stripe.com/privacy

9. Affiliate Disclosure

Some pages may contain affiliate links (e.g. VPN providers like NordVPN or financial services like Wise).

If you click on these links and make a purchase, we may earn a commission at no additional cost to you.

These links help support the maintenance of this website.

10. Data Retention

We retain data only for as long as necessary:

  • Account data: retained while the account exists; deleted or anonymized upon confirmed account deletion, subject to any legal retention obligations described below
  • Detailed API usage logs: retained for up to 90 days for debugging, support, credit verification, abuse prevention, and reliability monitoring
  • Billing, subscription, and security-related records: may be retained for up to 12 months or longer where required by applicable tax, accounting, fraud prevention, dispute resolution, or legal compliance obligations
  • Uploaded or processed files: retained only temporarily where technically necessary for processing; deleted immediately after
  • Contact and support messages: retained as needed to respond and maintain support records
  • Aggregated or anonymized analytics: may be retained for longer periods once no longer identifiable to individual users

When you request account deletion: active API tokens are revoked immediately, account access is disabled, and profile data no longer required is deleted or anonymized. Billing records, invoice history, security logs, and records required for fraud prevention, tax, accounting, or dispute resolution may be retained where legally or operationally required. Stripe may also retain payment records according to its own legal obligations.

11. International Data Transfers

Your data may be processed on servers located outside your country.

We ensure appropriate safeguards are in place when required, in accordance with applicable data protection laws.

12. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Request data portability where applicable
  • Withdraw consent at any time (where processing is based on consent)

These rights apply to account data, API usage data, and billing data where applicable. Note that some billing and invoice records may need to be retained to comply with legal obligations even after a deletion request. To exercise your rights, contact us via our Contact page.

13. Third-Party Services

We may use the following third-party services:

  • Google Analytics — for traffic analysis
  • Google AdSense — for advertising
  • Stripe — for payment processing and subscription management
  • Affiliate platforms — for affiliate link tracking

These services have their own privacy policies and data processing terms.

14. Changes to This Policy

We may update this Privacy Policy at any time.

Changes will be posted on this page with an updated date.

We encourage you to review this page periodically.

15. Contact

For any questions regarding this Privacy Policy or to exercise your data rights, contact us via our Contact page.