Privacy Policy

1. Introduction

ToolSite News ("the Site," "we," "our," or "us") is committed to transparency regarding the handling of personal data. This Privacy Policy explains what information, if any, is collected when you visit the Site, how it is used, and your rights under applicable data protection laws, including the EU General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA"), and the ePrivacy Directive.

The Site is designed to be privacy-respecting by default. We do not collect, store, or process personal data from visitors beyond what is strictly necessary for the technical operation of the Site.

2. Data Controller

The data controller responsible for the Site is the Site operator, reachable via the contact information provided on our Contact page.

3. Information We Do NOT Collect

To be explicit, the Site does not:

• Collect names, email addresses, or any other personal identifiers.
• Require or support user accounts, registrations, or logins.
• Use cookies, pixels, or similar tracking technologies for analytics, advertising, or profiling.
• Collect or process sensitive personal data (as defined under GDPR Article 9).
• Use any form of behavioral tracking, fingerprinting, or cross-site tracking.
• Collect payment information or engage in e-commerce transactions.
• Operate mailing lists, newsletters, or push notification services.
• Process personal data for automated decision-making or profiling.

4. Information That May Be Collected Incidentally

4.1 Server Access Logs

As with virtually all websites, the web server infrastructure hosting the Site (Cloudflare Pages) may automatically log standard HTTP request data for operational and security purposes. This data may include:

• Your device's Internet Protocol ("IP") address.
• Browser type and version.
• The pages of the Site that you visit.
• The time and date of your visit.
• The time spent on those pages.
• Referring website addresses.
• HTTP status codes and error logs.

These server logs are retained for a limited period by our hosting provider for purposes of ensuring network security, preventing fraud and abuse, and maintaining service reliability. We do not access, analyze, or process these logs to identify individual visitors. For details on how Cloudflare processes this data, please refer to Cloudflare's Privacy Policy.

4.2 Third-Party Content Delivery

The Site loads resources from the following third-party services as part of its normal operation:

• Unsplash (images.unsplash.com) — delivers article images. Unsplash may receive technical information such as your IP address and browser user agent as part of its content delivery network operations. This data is processed in accordance with Unsplash's Privacy Policy.
• jsDelivr CDN (cdn.jsdelivr.net) — delivers the Chart.js library for our analytics dashboard. jsDelivr may process request data for content delivery and abuse prevention purposes, as described in the jsDelivr Privacy Policy.
• Picsum Photos (picsum.photos) — serves as a fallback image service when the primary image source is unavailable. Picsum may log standard HTTP request data. See picsum.photos for more information.

We have no control over the data collection practices of these third parties and encourage you to review their respective privacy policies. These services are essential for the functionality of the Site and are loaded only when you visit pages that contain images or our analytics dashboard.

5. Cookies and Similar Technologies

The Site itself does not set any cookies. However, third-party services used by the Site (Unsplash, jsDelivr, Picsum, and Cloudflare) may set technical session cookies that are strictly necessary for content delivery, load balancing, and security purposes. These are considered "strictly necessary" cookies under the ePrivacy Directive and do not require consent.

For a complete description of cookie usage, please see our Cookie Policy.

6. Legal Basis for Processing

Where any processing of personal data occurs (such as server log data by our hosting provider), it is processed on the basis of legitimate interests (GDPR Article 6(1)(f)), specifically the legitimate interest in maintaining network and information security, preventing fraud and abuse, and ensuring the technical availability and reliability of the Site.

7. Data Retention

Server access logs retained by our hosting provider (Cloudflare) are subject to Cloudflare's retention policies. We do not independently store or retain any personal data from Site visitors. Any incidental data processed by third-party services is governed by their respective retention policies.

8. Data Transfers

Our hosting infrastructure (Cloudflare Pages) operates a globally distributed network. Access logs and other technical data may be processed on servers located in various jurisdictions, including outside the European Economic Area. Cloudflare maintains certifications under the EU-U.S. Data Privacy Framework and implements appropriate safeguards, including Standard Contractual Clauses, for international data transfers, as detailed in Cloudflare's Data Processing Addendum.

9. Your Rights Under GDPR

If you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, you have the following rights under applicable data protection laws:

• Right of Access: You have the right to obtain confirmation as to whether personal data concerning you is being processed, and where that is the case, access to that data.
• Right to Rectification: You have the right to obtain the rectification of inaccurate personal data concerning you.
• Right to Erasure ("Right to be Forgotten"): You have the right to obtain the erasure of personal data concerning you without undue delay, subject to certain exceptions.
• Right to Restriction of Processing: You have the right to restrict processing of your personal data under certain circumstances.
• Right to Data Portability: You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.

Since the Site does not collect or store personal data from visitors, these rights are inherently respected in the normal course of operation. If you believe your personal data has been processed by the Site or its service providers in violation of your rights, please contact us immediately via our Contact page.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with specific rights regarding your personal information:

• Right to Know: You have the right to know what personal information is collected, used, shared, or sold.
• Right to Delete: You have the right to request deletion of personal information collected from you.
• Right to Opt-Out: You have the right to opt-out of the sale or sharing of personal information.
• Right to Correct: You have the right to correct inaccurate personal information.
• Right to Limit Use: You have the right to limit the use and disclosure of sensitive personal information.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

The Site does not sell, share, or otherwise disclose personal information to third parties for monetary or other valuable consideration. Since the Site does not collect personal information from visitors beyond what is described in this policy, these rights are inherently respected. We do not and will not discriminate against any visitor for exercising their privacy rights. To exercise any of these rights, please contact us via our Contact page.

11. Children's Privacy

The Site is not directed to individuals under the age of 16 ("Children"). We do not knowingly collect personal data from Children. If you are a parent or guardian and you are aware that your Child has provided us with personal data, please contact us. If we become aware that we have collected personal data from Children without verification of parental consent, we will take steps to remove that information from our servers. Since the Site does not collect personal data through any mechanism, the risk of accidental collection is negligible.

12. Do Not Track Signals

The Site does not respond to Do Not Track ("DNT") signals because it does not track users across websites. The Site has no mechanism to track users and therefore cannot alter its behavior in response to DNT signals.

13. Data Breach Notification

In the unlikely event of a data breach involving personal data (despite the Site's design of collecting no such data), we will comply with applicable notification requirements under GDPR, CCPA, and other relevant laws. Given the nature of the Site, any breach would be limited to server access logs held by our hosting provider and would be addressed in coordination with that provider.

14. International Users

The Site is hosted on a globally distributed content delivery network. If you are accessing the Site from outside the European Union, please be aware that your information may be transferred to, stored, and processed in various jurisdictions. By using the Site, you consent to such transfer and processing in accordance with this policy and applicable data protection laws.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to periodically review this policy for any changes. Material changes will be noted prominently on the Site. Continued use of the Site after changes are posted constitutes acceptance of the revised policy.

16. Contact and Complaints

For questions about this Privacy Policy, to exercise your data protection rights, or to file a complaint, please contact us via our Contact page.

You also have the right to lodge a complaint with your local data protection supervisory authority. For users in Romania, the competent authority is:

• Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP)
• Website: https://www.dataprotection.ro
• Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, cod postal 010336, Bucuresti, Romania
• Email: [email protected]
• Phone: +40 318 059 211

For EU residents in other Member States, a list of national data protection authorities is available at the European Data Protection Board website.