Your privacy, data security, and total control over your files are the highest priorities at Toolosaurus.
The vast majority of our tools process your files directly inside your web browser – without uploading to foreign servers. What happens on your device stays on your device.
The data controller responsible for the processing of personal data under the General Data Protection Regulation (GDPR) is Mario Olmos (Wilhelmstraße 22, 53111 Bonn, Germany). If you have questions about privacy or wish to exercise your rights, contact us at: support@toolosaurus.com.
We strictly adhere to Privacy by Design and data minimization (Art. 5 GDPR). The vast majority of our utilities (including PDF editor, image compression, audio cutter, video speed changer, QR & barcode generators, EPUB converter, and calculators) process files exclusively in your local browser memory using WebAssembly, HTML5 Canvas, and Web Audio API. No file is ever uploaded to our servers for these tools.
For tools requiring cloud infrastructure (such as heavy video conversions or external media downloaders), all transfers are encrypted via TLS, processed in isolated sandbox environments, and automatically and permanently deleted from our servers within 2 hours.
Toolosaurus is fully accessible without an account. If you choose to create a free account, we securely store your email, a bcrypt password hash, and your profile preferences (salutation, nickname, currency). When using OAuth with Google or GitHub, only verified basic profile details are received.
Payments for Pro subscriptions are processed securely by Stripe Inc. (PCI-DSS Level 1 certified). Toolosaurus never stores credit card or bank details on its own infrastructure.
We only use strictly essential cookies and local storage items (session tokens, language preferences, and dark/light mode settings). We never use invasive third-party ad trackers or sell data to brokers.
Our web servers automatically record temporary server logs (anonymized IP, timestamp, requested URL, user agent) under Art. 6(1)(f) GDPR to ensure server reliability, DDoS prevention, and overall platform security.
Under GDPR, you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17 - 1-click account deletion available in dashboard), restrict processing (Art. 18), data portability (Art. 20), and object (Art. 21). You also have the right to lodge a complaint with a supervisory authority.
We implement state-of-the-art TLS 1.3 / 256-bit SSL encryption across the entire platform with HSTS enabled to prevent eavesdropping and data tampering.
This Privacy Policy is effective as of March 2026. For any questions regarding your personal data, reach out to support@toolosaurus.com.