1. The short version
ToolClack tools are built local-first. Without an account, your snippets, autofill values and details live only in your own browser: we do not see them, collect them or sell them. If you choose to sign in, we store what the features you use need (your synced content, your devices, your usage numbers) and nothing more, and you can delete all of it yourself, at any time, without asking us.
2. Who we are
ToolClack is the operator of toolclack.com and of the products published under the ToolClack name, such as FillKit, and is the data controller for the processing described here. For anything in this policy, write to legal@toolclack.com.
3. Cookies and local storage
toolclack.com embeds no third-party analytics and no advertising trackers, so there is nothing to consent to and you see no cookie banner. The only measurement we do is an anonymous page-view count on our own server: each page load adds one to that page's daily total, with no cookie, no stored IP address and no identifier of any kind, so individual visitors cannot be told apart or followed. The only things we store live on your own device, and only when they serve you:
- Theme preference: a
localStorageentry remembering light or dark. Strictly functional. - Sign-in session: if you sign in with Google to
manage a plan or a team, your session token is kept in
localStorageso you stay signed in. It is set only after you actively sign in, and cleared when you sign out. - Admin cookie: a single first-party cookie is set only for the site owner's private admin area, never for visitors.
None of this tracks you across sites or profiles you. Like any website, our hosting infrastructure keeps short-lived standard access logs (such as IP addresses) for security and operations.
4. Newsletter
If you subscribe to the newsletter, we store your email address, the site language you subscribed from and the date, only to send you news about ToolClack products. We never share the list. To unsubscribe and have your address deleted, write to legal@toolclack.com, or use the unsubscribe link included in every email once sending starts.
5. FillKit without an account
Everything you create in FillKit (snippets, autofill sets, your
details, settings, usage counters) is stored in your browser
(chrome.storage) on your machine. Without an account
the extension sends nothing to us: no telemetry, no usage
reporting, no phoning home. The interface language and every other
preference stay on your device.
To recognize your shortcuts, FillKit looks at the characters you type in the field you are typing in. This happens on your device only: what you type is never stored or sent anywhere, and only the snippets and autofill values you explicitly save are kept.
6. What FillKit refuses to do
- No password capture or filling: password fields are ignored everywhere, and so are one-time code (2FA) and card number or CVV fields.
- No recording of your browsing or of what you type on pages.
- No ambient learning: FillKit only saves what you explicitly tell it to save.
- No CAPTCHA solving or bot circumvention.
- No selling or sharing of personal data with third parties.
7. Google Drive backup (optional)
If you connect Google Drive, FillKit writes a single backup file to
your own Drive when you press Backup. It uses the
drive.file scope, which only grants access to files the
extension itself creates: FillKit cannot see the rest of your Drive,
and we never see the file at all, because it travels directly
between your browser and Google. Disconnecting Drive (or revoking
access from your Google account) ends this immediately.
FillKit's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the Chrome Web Store User Data Policy.
8. Your ToolClack account
Signing in with Google creates a ToolClack account. From Google we receive, and store, your Google account identifier, your email address, your name and your profile picture, used to identify your account and to show you who is signed in. With the account we also store your plan, and for paid plans the identifier and renewal date of your subscription.
9. Sync, history and trash (paid plans)
If you enable sync, we store on our server:
- Synced content: your snippets, autofill sets, details and settings, so your devices stay in step, plus the numbered counters your snippets use. Autofill sets can contain values you entered in a form on a website and chose to save.
- Version history: the 20 most recent earlier versions of each synced snippet, so you can restore one.
- Trash: items you delete stay restorable for 30 days, then they are removed for good.
- Devices: for each of your installs (up to three), a random identifier, a descriptive name such as "Chrome 130 · Windows 11" (browser, version and operating system), when it was added and when it last synced, so you can see and remove devices from your account page.
- Usage statistics: per day, how many snippets were expanded, how many forms were filled and how many characters that saved you. Only these counts, never what was typed or where. They power the usage figures on your account page, and you can reset them from the extension or the account page at any time.
This data is used solely to provide these features. It travels over encrypted connections and is kept until you delete it. Disconnecting stops the sync and your local copy keeps working. The Delete account action on your account page at toolclack.com removes everything stored on our side, self-service, no email required. If a paid plan ends, your synced data stays so that subscribing again restores it, until you delete it. Deleted data can persist in our encrypted nightly backups for up to 14 days before it is rotated away for good; backups are used only for disaster recovery, and if we ever restore one, deletions you requested are applied again.
10. Teams (Business plan)
A team owner adds members by email address. For the team we store its name, and for each member that email address, the role (viewer or editor) and whether the member has accepted the invite. Inside a team:
- Members see each other's email address and role, and the folders, autofill sets and company details the team shares. Everything a member does not explicitly share stays private.
- The owner sees usage statistics for the team and for each member (expansions, fills and time saved; never content).
- Shared items keep their own trash and history, visible to the team.
When an owner deletes their account the team is dissolved and its shared folders are removed for every member; when a member leaves, the shared folders stay with the team.
11. Share links
When you create a share link, we store a snapshot of the shared folder or snippet and publish it at an unguessable address. Anyone who has the link can view and import that snapshot, so share only what you are happy to make public. You can revoke a link from your account page at any time; copies other people already imported stay with them.
12. Email to snippet (paid plans)
If you turn this feature on, you get a private email address. Mail sent to it is received through our email routing provider and processed automatically: only mail sent from your own account email address is accepted, and its subject and body become a snippet in your account. Everything else is discarded. We do not keep the original messages. Turning the feature off deletes the address.
13. Support requests
If you write to us through the support form or the Suggest a feature form, we store what you submit (your name, email address, the product concerned and your message) for the sole purpose of replying and keeping the conversation's context. The form requires your explicit consent, and you can ask us to delete a request at any time at legal@toolclack.com.
14. Payments
Paid plans are sold by Lemon Squeezy acting as merchant of record. Lemon Squeezy processes your payment and billing details under its own privacy policy; we never see your card number. What we receive is your subscription status and, for each payment, its amount, currency, date and whether it was refunded, which we keep as our accounting record.
15. Who processes data for us
We use a small number of providers, each only for its own task and under a data processing agreement where the law requires one:
- Hetzner (Nuremberg, Germany): hosting of our servers and database.
- Cloudflare: domain name service and the routing of mail sent to email-to-snippet addresses, and Turnstile, the check that keeps spam out of the support form (it looks at technical signals from your browser, not at what you write).
- Google: sign-in, and Google Drive if you connect it.
- Lemon Squeezy: payments, invoices and taxes.
- OVH (France): the mailbox behind our contact address.
- Brevo (Paris, France): sending of service emails to paying accounts (a check-in after your purchase, a review invitation) and, if you subscribe, the newsletter. It receives your email address and plan; every such email carries an unsubscribe link, and the contact is deleted when your account is.
16. Legal bases and transfers
We process account, sync, team, share-link and payment data because it is necessary to provide the service you asked for (a contract); support requests and newsletter subscriptions on the basis of your consent; security logs on the basis of our legitimate interest in keeping the service safe. Our servers are in the EU. Some providers (Google, Cloudflare, Lemon Squeezy) may process data outside the EU; where they do, the transfer is covered by the safeguards the GDPR requires, such as the EU standard contractual clauses or the EU-US Data Privacy Framework.
17. Your rights
Under the GDPR you can access, correct, export and erase your personal data, and object to or restrict its processing. In practice: everything is exportable from the extension as a plain JSON file at any time, and server-side data is deletable self-service as described above. For anything else, or to exercise any right, write to legal@toolclack.com. You also have the right to lodge a complaint with your local data protection authority.
18. Children
ToolClack products are not directed at children under 16, and we do not knowingly create accounts for them.
19. Changes to this policy
If this policy changes, the new version is published on this page with an updated date. Material changes to how account or sync data is handled will be announced in the product before they take effect.
20. Contact
Questions, requests, complaints: legal@toolclack.com.