Privacy Policy

At ToolLab ("we", "our", or "us"), accessible from https://toollab.in, our primary commitment is protecting your privacy. This Privacy Policy outlines what information is collected, how it is used, and how our architecture ensures your operational documents remain 100% private and secure.

---

1. Information We Do NOT Collect

Because ToolLab is built upon a local client-side processing model, we do not collect or store:

• Your Files and Documents: PDF shipping labels (Flipkart, Amazon, Meesho, 3PL), invoices, photos, converted graphics, or text inputs.
• Customer Personal Data: Recipient names, postal addresses, phone numbers, tracking numbers, or order contents embedded in your labels.
• Personal Account Credentials: ToolLab does not require user registration, passwords, or login accounts to access any of our tools.
• Financial or Banking Information: We do not store or process debit/credit card details or bank account numbers.

2. Information We Automatically Collect (Web Diagnostics & Telemetry)

Like virtually all modern web applications, we collect limited, non-personally identifiable diagnostic information automatically when you visit our website:

• Server Log Data: Internet Protocol (IP) address, browser type, operating system version, referring/exit URLs, date/time stamps, and request paths. These logs are used strictly for server monitoring, performance tuning, and DDoS/abuse prevention.
• Device and Network Information: Approximate geographic region (country and city level, not precise GPS), screen resolution, preferred language, and connection type.

3. Web Analytics and Behavioral Tracking Technologies

To understand how visitors navigate ToolLab, identify broken features, measure tool performance, and enhance user experience, we implement third-party analytics and measurement services:

A. Google Tag Manager (GTM)

We utilize Google Tag Manager, a tag management system provided by Google LLC. GTM enables us to deploy and update analytics tags and tracking scripts dynamically. GTM itself does not set cookies or collect personally identifiable information; it merely fires other authorized scripts (such as Google Analytics).

B. Google Analytics 4 (GA4)

We use Google Analytics to track aggregate website usage statistics, including page views, visit duration, user paths, bounce rates, and browser technologies. Google Analytics employs first-party cookies (such as _ga and _ga_*) to distinguish unique visitors and sessions across browsing interactions.

Google Analytics operates with IP masking/anonymization enabled. We do not pass any personally identifiable information (PII) or customer details to Google Analytics. For more information on how Google collects and processes data, visit Google's Privacy & Terms. You can prevent Google Analytics from tracking your visits by installing the Google Analytics Opt-out Browser Add-on.

C. Microsoft Clarity

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising.

Clarity tracks interactions such as mouse movements, scroll positions, clicks, and page navigation. Important Privacy Protection: Microsoft Clarity applies automated sensitive data masking by default. Furthermore, because ToolLab renders and manipulates your PDFs, thermal labels, and images directly in local browser memory and HTML5 Canvas elements rather than static server HTML, the contents of your documents and customer shipping details are not readable by or transmitted to Microsoft Clarity.

For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

4. Cookies and Local Browser Storage

Cookies are small text files placed on your device by your browser. ToolLab uses cookies and local browser storage for the following specific purposes:

• Essential & Functional Local Storage: We use your browser's localStorage to store your display theme preference (e.g., Light Mode or Dark Mode). This data remains exclusively on your device.
• Analytics Cookies: Cookies set by Google Analytics (e.g., _ga, _ga_*) and Microsoft Clarity (e.g., _clck, _clsk, MUID) to distinguish sessions and understand aggregate user interactions.
• Third-Party Advertising Cookies: If advertising partners (such as Google AdSense) display ads on our site, they may set third-party cookies or web beacons to deliver non-intrusive, relevant advertisements and prevent ad fraud.

You can configure your web browser to refuse all cookies, alert you when a cookie is placed, or delete existing cookies at any time via your browser settings (Chrome, Firefox, Edge, Safari, Brave).

5. Third-Party Links & Content Delivery Networks (CDNs)

ToolLab loads certain open-source scripts, libraries, and web fonts from trusted Content Delivery Networks (such as Google Fonts, Cloudflare CDN, and jsDelivr). When your browser loads these external assets, your IP address may be transmitted to these CDN providers strictly to facilitate asset delivery. These providers adhere to their respective strict data protection standards.

Our website may also contain links to third-party platforms (e.g., e-commerce portals, courier tracking, Google Forms feedback). We have no control over and assume no responsibility for the privacy policies, practices, or content of any third-party websites.

6. Data Security and Infrastructure Hardening

We maintain strict administrative, architectural, and technical safeguards to keep ToolLab secure:

• Strict Transport Security (HSTS): All connections to ToolLab are enforced via TLS/HTTPS with a 1-year HSTS preload directive, ensuring your communication is always encrypted.
• Rigorous Content Security Policy (CSP): We enforce an explicit Content Security Policy that restricts external script origins, disables unsafe evaluation, and isolates runtime environments.
• Zero Server-Side Storage: Because your uploaded files are never received by our backend, there is no server-side database of user documents that could be breached, leaked, or subpoenaed.

7. Your Privacy Rights (GDPR, CCPA, and Applicable Laws)

Depending on your geographic location, you may hold certain rights regarding your personal information under data protection laws such as the General Data Protection Regulation (GDPR) or California Consumer Privacy Act (CCPA):

• The right to know what personal data is collected, disclosed, or retained.
• The right to request deletion of any personal data collected.
• The right to opt out of the sale or sharing of personal data (we do not sell your personal data).
• The right not to receive discriminatory treatment for exercising your privacy rights.

Since we do not store personal profiles, accounts, or uploaded documents, we cannot link anonymous telemetry to an individual user identity. If you have any inquiries regarding your privacy rights, you may contact us directly.

8. Children's Online Privacy

ToolLab is designed as a business utility for e-commerce sellers and professionals. We do not knowingly collect personal information from children under the age of 13. If you believe that a child has provided personal information to us, please contact us immediately, and we will promptly delete such records.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our tool functionality, legal requirements, or third-party service integrations. Any updates will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or our privacy practices, please contact us:

• Website: https://toollab.in/pages/contact
• Email: mask60m@gmail.com