Privacy Policy

Last updated: 2 September 2026

Atelier Tools ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

The short version: Many tools process inputs in your browser, but processing varies by tool. Site hosting, authentication, analytics, support, and any tool that explicitly uses an external service can transmit data. Check the individual tool before using sensitive material.

1. Data Controller

Atelier Tools is operated as a sole trader registered in England. For data protection enquiries, contact: privacy@ateliertools.com

2. Data We Collect

2.1 Data You Provide

Data Type When Collected Purpose
Email address Account creation Authentication, account recovery, service communications
Historical subscription records Existing Pro account administration New paid plans are not currently available; historical billing records may be held by Stripe
Bug reports When you submit feedback Improving the service

2.2 Data We Collect Automatically

Data Type Purpose Retention
Connection data, which can include IP address Security, abuse prevention Handled under provider and service retention settings
Browser/device info Compatibility, debugging Google Analytics and service diagnostics
Pages visited Understanding usage patterns Google Analytics

2.3 Tool content

For tools described as browser-only, Atelier does not intentionally send the content entered into the tool to our application backend. This does not include information you deliberately submit through account, support, feedback, analytics, or external-service features.

  • Check the individual tool page for its processing boundary.
  • Do not assume every tool is local-only.
  • Clipboard access occurs only when you use a browser feature that requests it.

3. How We Use Your Data

We use collected data to:

  • Provide and maintain the Service
  • Administer accounts and historical Pro subscriptions; new paid plans are not currently available
  • Send service-related communications (password resets, subscription confirmations)
  • Respond to bug reports and support requests
  • Analyse aggregated usage to improve the Service
  • Detect and prevent abuse or security threats

We do not sell personal data or use it to serve third-party advertising.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

  • Contract: Processing necessary to provide the Service you've requested
  • Legitimate interests: Security, fraud prevention, service improvement
  • Consent: Marketing communications (if any, which you can opt out of)
  • Legal obligation: Compliance with applicable laws

5. Data Sharing

We share data only with:

  • Stripe: Historical subscription administration; new paid plans are not currently available (see Stripe's Privacy Policy)
  • Google Analytics: Site usage measurement (see Google's Privacy Policy)
  • Supabase: Authentication and database (see Supabase's Privacy Policy)
  • Cloudflare: Hosting and CDN (see Cloudflare's Privacy Policy)

We do not sell your personal data to third parties.

6. Cookies

We use browser storage and cookies for authentication, preferences, security, and Google Analytics:

Cookie Purpose Duration
Authentication token Keeping you logged in Session / 30 days
Preferences Remembering your settings 1 year
Google Analytics identifiers Measuring page and feature usage Controlled by the active analytics and browser settings

We do not use third-party advertising cookies. The site's current notice is informational and does not itself prove or change Google Analytics consent or Admin configuration.

7. Data Security

The following controls are intended, but their active configuration requires owner verification before deployment:

  • Transport protection for network requests
  • Password handling through the active authentication provider
  • Access controls for personal data

8. Data Retention

  • Account data: Retention and deletion follow the active authentication and storage configuration
  • Historical billing records: Retention follows applicable record-keeping duties and provider settings
  • Server and security logs: Retention follows active hosting and security settings
  • Bug reports: Retained until resolved, then anonymised or deleted

9. Your Rights

Under GDPR and UK data protection law, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a portable format
  • Object: Object to certain processing
  • Withdraw consent: Where processing is based on consent

To exercise these rights, contact privacy@ateliertools.com. Requests are handled under the applicable verified legal timeline.

10. International Transfers

Your data may be processed in countries outside the UK/EEA by service providers. Transfer locations, mechanisms, and safeguards require owner verification against the active provider configuration.

11. Children's Privacy

Our Service is not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy with an updated date. Your continued use of the Service after changes constitutes acceptance.

13. Contact & Complaints

For privacy enquiries: privacy@ateliertools.com

If you're unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

← Back to Atelier Tools · Terms of Service