Privacy Policy

Last updated: 25 February 2026

Atelier Tools ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

The short version: Our tools run entirely in your browser. We don't see, store, or transmit the content you process. We only collect minimal data needed to run the service.

1. Data Controller

Atelier Tools is operated as a sole trader registered in England. For data protection enquiries, contact: [email protected]

2. Data We Collect

2.1 Data You Provide

Data Type When Collected Purpose
Email address Account creation Authentication, account recovery, service communications
Payment information Pro subscription Processed by Stripe; we don't store card details
Bug reports When you submit feedback Improving the service

2.2 Data We Collect Automatically

Data Type Purpose Retention
IP address Security, abuse prevention Server logs deleted after 30 days
Browser/device info Compatibility, debugging Aggregated analytics only
Pages visited Understanding usage patterns Aggregated analytics only

2.3 Data We Do NOT Collect

We do not collect, store, transmit, or have access to:

  • Content you input into our tools (text, images, code, files)
  • Output generated by our tools
  • Your clipboard contents
  • Files on your device (unless you explicitly upload them, and even then they're processed locally)

All tool processing happens entirely in your browser using JavaScript. Your data never leaves your device.

3. How We Use Your Data

We use collected data to:

  • Provide and maintain the Service
  • Process payments for Pro subscriptions
  • Send service-related communications (password resets, subscription confirmations)
  • Respond to bug reports and support requests
  • Analyse aggregated usage to improve the Service
  • Detect and prevent abuse or security threats

We do NOT use your data for advertising or sell it to third parties.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contract: Processing necessary to provide the Service you've requested
  • Legitimate interests: Security, fraud prevention, service improvement
  • Consent: Marketing communications (if any, which you can opt out of)
  • Legal obligation: Compliance with applicable laws

5. Data Sharing

We share data only with:

  • Stripe: Payment processing (see Stripe's Privacy Policy)
  • Supabase: Authentication and database (see Supabase's Privacy Policy)
  • Cloudflare: Hosting and CDN (see Cloudflare's Privacy Policy)

We do not sell your personal data to third parties.

6. Cookies

We use minimal cookies:

Cookie Purpose Duration
Authentication token Keeping you logged in Session / 30 days
Preferences Remembering your settings 1 year

We do not use tracking cookies or third-party advertising cookies.

7. Data Security

We implement appropriate security measures including:

  • HTTPS encryption for all data in transit
  • Secure password hashing
  • Regular security assessments
  • Limited access to personal data

8. Data Retention

  • Account data: Retained while your account is active, deleted within 30 days of account deletion
  • Payment records: Retained for 7 years (legal requirement)
  • Server logs: Deleted after 30 days
  • Bug reports: Retained until resolved, then anonymised or deleted

9. Your Rights

Under GDPR and UK data protection law, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a portable format
  • Object: Object to certain processing
  • Withdraw consent: Where processing is based on consent

To exercise these rights, contact [email protected]. We will respond within 30 days.

10. International Transfers

Your data may be processed in countries outside the UK/EEA by our service providers. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

11. Children's Privacy

Our Service is not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy with an updated date. Your continued use of the Service after changes constitutes acceptance.

13. Contact & Complaints

For privacy enquiries: [email protected]

If you're unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

← Back to Atelier Tools · Terms of Service