Legal
Privacy Policy
Short version: browse freely with no account and no tracking. If you sign in with GitHub to contribute, we store your public GitHub profile basics and email — nothing more.
Last updated November 9, 2026
The ToolBolt is built to collect as little as possible. You can browse the whole site without an account, and we don't use analytics, advertising or tracking cookies. We only store personal data if you sign in to contribute or send us a message.
If you just browse
- We don't ask for, or store, any personal information.
- We don't set cookies for visitors who aren't signed in.
- When you choose the Developers or Everyday track, your browser saves that preference locally in
localStorage(toolbolt-audience) so the site remembers your track on your next visit. - We keep lightweight, cookie-free, anonymous daily counters (such as track selection counts, popular intent chips, and zero-result search terms) to see which tools and topics are helpful. These counters never record IP addresses, browser fingerprints, cookies, or personal identifiers.
- Like almost every website, our hosting provider automatically processes technical data such as your IP address and browser type to deliver pages and protect against abuse. We don't use this to identify or profile you.
If you sign in with GitHub
Signing in is only needed to contribute. When you sign in, GitHub shares — with your permission — the following, which we store:
- Your GitHub username and account ID
- Your name and profile picture (avatar), as shown on GitHub
- Your email address (GitHub's “read your email addresses” permission)
We also store your role on the site (member, contributor or admin) and the tools you submit.
We don't store your GitHub password or your GitHub access tokens, and we can't post, push code or act on GitHub on your behalf.
If you use the contact form
The contact form asks for your name, email address, a topic, your message and, optionally, a link. We store these so we can read and reply to your message. Only admins can see them. We don't add you to any mailing list, and we delete messages on request or once they're no longer needed.
To limit spam, the form uses a hidden trap field, a minimum time to fill it in, and a limit on messages per email address. It doesn't record your IP address.
How we use it
- To sign you in and keep you signed in.
- To show contributor credit: your GitHub username and avatar appear publicly on tools you submit and on your contributor profile page.
- To review and manage submissions, and to contact you about your contributions if needed.
We don't sell your data, use it for advertising, or share it with anyone except the service providers below.
Cookies
We only use cookies that are necessary for signing in:
| Cookie | Purpose | How long |
|---|---|---|
toolbolt.session-token | Keeps you signed in | Up to 30 days, or until you sign out |
toolbolt.csrf-token | Protects sign-in forms against forgery | Browser session |
toolbolt.callback-url | Returns you to the page you were on after signing in | Browser session |
toolbolt.state, toolbolt.pkce.code_verifier | Secures the GitHub sign-in handshake | 15 minutes |
On the live site these names start with __Secure- or __Host-, which restricts them to secure connections.
Service providers
We rely on a small number of providers to run the site:
- GitHub — sign-in, repository statistics, and avatars/logos shown on the site.
- Vercel — hosting.
- MongoDB Atlas — the database where accounts and tools are stored.
These providers process data on our behalf under their own privacy and security terms.
Your choices and rights
- Sign out at any time from the account menu.
- Revoke access: GitHub → Settings → Applications → Authorized OAuth Apps → The ToolBolt.
- Access, correct or delete your data: contact us (below) and we'll export or delete your account and any messages you've sent. Tools you published may stay listed with the credit removed, or be removed — your choice.
Children
The site isn't directed at children under 13, and we don't knowingly collect their data.
Changes
If this policy changes, we'll update the “last updated” date at the top of this page.
Contact
For privacy questions or data requests, use the contact form or email m.tahiridrees27@gmail.com.