Last updated: 2026-10-13
This policy explains what information ToolsForAnyone ("we", "us") processes when you use toolsforanyone.com and its sister domains (the "Site"), why, and the choices you have. We have designed the Site to collect as little personal data as possible.
1. Information we process
Your IP address and request data
Like every website, our servers receive your IP address, browser user agent and the page you request. Showing you your IP address and its approximate location is the core purpose of the Site. Our hosting provider (Microsoft Azure) keeps standard server logs for security and reliability, which are retained for a limited period. When you run one of the security tools (Website Security Scanner, SQL Injection Risk Scanner), the address scanned, the time and your IP address are written to these logs so that misuse can be investigated; our legitimate interest is preventing abuse of the tools.
Lookups you perform
When you use a tool, the value you enter (for example a domain, IP address, URL or port number) is processed to produce the result. We do not store a history of your lookups. Results may be cached in server memory for a few minutes to an hour to improve speed, then discarded. To prevent abuse, we keep short-lived counters of requests per IP address for rate limiting.
Information you send us
If you use the contact form, we store your name, email address, message, the language of the page and, to fight spam, your IP address and browser user agent, so that we can reply and keep a record of the conversation. The form also sets a security cookie (csrftoken) that protects it against forged submissions.
Collaborative editor. In the collaborative code editor, live edits travel directly between participants' browsers. A copy of each session (the document text, its language, the participants' display names and the IP address of the browser that saved it) is stored on our servers for 30 days so that the session link keeps working, to prevent abuse and to help with support requests, then deleted automatically. To connect the browsers, our server relays short encrypted connection messages (deleted after two minutes), and the browsers contact public STUN servers run by Google and Cloudflare, which see the participants' IP addresses, as with any video call.
2. Third-party services
To produce results, some data is sent to these providers:
- ipwhois.io: your IP address (or the IP you look up) is sent to retrieve geolocation and ISP data.
- Public DNS resolvers (Cloudflare, Google, AdGuard, NextDNS, DNS.SB, AliDNS): domain names you look up are queried over DNS-over-HTTPS. Your own IP address is not sent to them.
- Domain registries and regional internet registries (via IANA's RDAP bootstrap): domains and IPs you look up in WHOIS or the availability checker.
- ipify.org: on the home page and IPv6 test, your browser contacts ipify directly to detect your IPv4 and IPv6 addresses.
- OpenStreetMap: map tiles are loaded by your browser from OpenStreetMap's servers, which see your IP address.
- Cloudflare speed test: when you run the internet speed test, your browser downloads and uploads test data directly to Cloudflare's nearest data centre (speed.cloudflare.com), which sees your IP address. The results stay in your browser.
- jsDelivr and unpkg: content delivery networks that serve open-source styles and scripts.
3. Analytics
We use Google Tag Manager to load Google Analytics, which we use to understand how the Site is used (for example, which tools are popular) so we can improve it. Google Analytics uses cookies and collects data such as pages viewed, approximate location, device and browser. See how Google uses information from sites that use its services. You can opt out with the Google Analytics opt-out browser add-on.
4. Advertising
The Site is free because it is supported by advertising. We use Google AdSense. Google and its partners use cookies and similar technologies to serve ads based on your prior visits to this and other websites, and to measure ad performance.
- Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this Site and/or other sites on the internet.
- You can opt out of personalised advertising by visiting Google Ads Settings or www.aboutads.info.
- Where required by law (for example in the EEA, the UK and Switzerland), personalised ads are shown only with your consent, collected through a consent banner.
See our cookie policy for the cookies involved.
4a. Chrome extension
Our Chrome extension shows your IP address by requesting toolsforanyone.com/json and api4/api6.ipify.org when you open its popup. These servers necessarily see your IP address; nothing is stored by the extension. The list of tools it shows is built into the extension, so searching it sends nothing anywhere.
It uses the contextMenus permission only to act on something you explicitly choose: when you pick one of its right-click options, it opens our website with the selected text, the link or the current page address, so the matching tool can check it. Text sent to the AI Detector or AI Hallucination Checker is placed after the # in the address, which browsers never send to any server; those tools analyse it inside your browser. The extension does not read the content of the pages you visit, does not track your browsing, stores no data and contains no analytics or advertising.
5. Legal bases (EEA/UK visitors)
We process data to provide the service you request (legitimate interests and performance of the service), to secure and improve the Site (legitimate interests), and for analytics and personalised advertising where you have given consent.
6. Retention
Tool inputs are not stored beyond short-lived caches. Rate-limit counters expire within minutes. Server logs are kept for a limited time by our hosting provider. Analytics data is retained according to our Google Analytics settings, and contact-form messages for as long as needed to handle your enquiry (at most two years, unless you ask us to delete them sooner).
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. California residents may ask what personal information we collect and request deletion; we do not sell personal information for money. To make a request, contact us. You may also complain to your local data protection authority.
8. Children
The Site is not directed at children under 13 (or 16 in the EEA), and we do not knowingly collect their personal data.
9. Security
The Site is served over HTTPS, and our tools refuse to connect to private or internal network addresses. No system is perfectly secure, but we take reasonable measures to protect the data we process.
10. Changes
We may update this policy from time to time. The date at the top shows when it was last changed.
11. Contact
Questions about privacy? Reach us through our contact page.