Skip to content

Privacy

This is the privacy notice for Tooley. It describes what we process, why, how long it lasts, who else can see it, and what your rights are. It is written to be read on its own; the security page adds the technical detail of how the service protects files. Last updated 2026-10-20.

Who is responsible

Tooley is operated by Kelcode Development (kelcode.co.uk), which is the data controller for this service. You can reach us through the contact form; see The contact form below for what that involves.

What we process

Your file and generated artefacts
The bytes you upload, and the output artefact the tool produces from them. They are processed in an isolated job on our own servers and are deleted automatically: your original uploaded file is deleted by the processor as soon as the job finishes (or immediately if rejected before processing), and the generated output artefact is kept for about ten minutes (each tool's page shows its own window in the 'Privacy & processing' panel). Once the window ends, the next minute-by-minute cleanup sweep removes the output artefact from our storage.
A download link
When a result is ready you get a signed link to the output artefact that is valid for the same window. Once the artefact is deleted the link stops working.
A temporary browser marker
A cookie named tf_owner, described under Cookies and browser storage. It is a random number with no meaning outside Tooley; its only job is to connect you with your own jobs and to authorise your downloads.
A theme choice
Picking light or dark mode stores one value in your browser's local storage (tf-theme). It never leaves your browser and exists only to remember your preference.
Request details
Like any website, our servers see the IP address of each request, the time it happened, the path requested, and the browser's user agent. These appear in basic service logs and in a short-lived abuse-prevention counter; we do not build profiles from them and we do not sell or share them.
Job records
The service keeps a record of each job: which tool ran, when, how long it took, whether it succeeded, an error code if it did not, the options you chose, and the names and sizes of the files involved (not their contents). Your IP address is stored with the job record. These records outlast the files and are explained under How long we keep things.
Contact messages
If you write to us, we process what you sent: your name, your e-mail address, the category you chose, the subject and the message. See The contact form.

Why we process it, and on what basis

We process personal data only for the purposes below. The lawful bases are set out under UK GDPR; they are our working position and you can challenge them at any time through the contact form.

Doing the job you asked for
Receiving your file, running the tool you chose, and giving you the result. Lawful basis: performing the service you have requested.
Keeping the service safe and available
Enforcing file and rate limits, distinguishing humans from automated abuse, and protecting the service from attack. Lawful basis: our legitimate interests in running a secure service.
Basic service logging and fault diagnosis
Understanding failures and keeping the service working. Lawful basis: our legitimate interests.
Answering your messages
Reading and replying to what you send through the contact form. Lawful basis: our legitimate interests in responding to enquiries.

We do not use your data to advertise to you, to profile you, or to train anything.

How long we keep things

Uploaded files and output artefacts
Deleted automatically, as described above: original uploaded files are deleted as soon as the processor completes the job, and generated output artefacts are swept clean after about ten minutes for every tool in the current catalogue.
Job records
Kept for longer than the files, in our service database. They let us run the service reliably and investigate faults. We have not yet fixed a deletion period for these records; when we do, this page will be updated with the actual figure.
Abuse-prevention state
The immediate counters that admit a browser session and rate-limit submissions live for seconds to minutes. The longer caps, such as a maximum number of jobs per tool per day, are worked out from the job records themselves rather than kept as a separate list.
Service logs
Basic request logs are retained for a period the operator keeps under review; we will publish the period here once it is fixed.
Contact messages
Kept in the mailbox they are delivered to and for as long as the operator's mail system keeps messages. We do not currently store them in the service database.

Who else can see it

Your file stays inside Tooley: it is uploaded to our own infrastructure and processed only there, by the tool you chose. It is not passed to external document services, CDNs, or AI providers.

Three kinds of third party touch the service in a limited way:

Where a provider sits outside the UK, a transfer mechanism under UK GDPR applies. We are finalising the fixed detail of our infrastructure and will state it here; until then, ask us via the contact form and we will answer factually.

Cookies and browser storage

Tooley uses exactly two pieces of browser state, and neither is a tracker.

tf_owner (cookie, strictly necessary)
Set the first time you start a job. It is a random, unguessable identifier that says "these jobs and downloads are mine". Without it, the service could not show you your own result or stop other people from reading it. It is set to be readable only by the server (not by scripts), sent only over secure connections, and it expires when you close your browser. Closing the browser or clearing cookies simply detaches you from old job records; it deletes nothing else.
tf-theme (local storage, optional)
Remembers light or dark mode. Never sent to the server.

There is no analytics or advertising storage of any kind, so there is no consent banner: nothing here needs consent to work the way you would expect.

Your rights

Under UK data-protection law you have the right to be informed, to see the personal data we hold about you, to have it corrected, erased, or restricted, to object to our processing, to withdraw consent where we rely on consent, and to take your data elsewhere where portability applies. You can also complain to the Information Commissioner's Office (ico.org.uk).

To exercise any of these, contact us through the contact form. One practical note, honestly put: because Tooley requires no account, most of what we hold is anonymous job records that your browser's temporary marker links to. Tell us roughly when you used the service and with which tool, and we will look for the records; we may need a little more information to be confident a record is yours, and we will not hand over someone else's.

The contact form

The form collects your name, e-mail address, an optional subject, a message, and a category (general questions, bug reports, security disclosures, and privacy questions). We use it only to read and reply to your message. It is delivered by e-mail; it is not published, it is not mixed with any file you have processed, and it is not used for analytics. Our reply comes from our own mailbox. To have a message deleted, e-mail or write to us and ask; include the address you used so we can find it.

Changes to this notice

If this page changes materially, the date at the top changes with it. If a future version of Tooley ever needs to process data in a way this notice does not describe, the tools affected will make that obvious before you use them.

Questions

If this page and your experience disagree, that is a bug or a mistake; tell us on the contact page.