Privacy Policy

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

• Account information (name, email, password)
• YouTube channel data and analytics
• Usage data and preferences
• Communication records with our support team

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Develop new products and services

We never sell or trade your personal information. We do share it with the processors that run the service — payment, hosting, email, anti-abuse and, with your consent, analytics. Section 7 names each of them and says what it receives. Some of those, such as the anti-abuse check on our forms, are necessary to operate the site and run on legitimate interest rather than consent.

Beyond those processors, we disclose personal data only:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and safety
• In connection with a business transfer or merger

We implement appropriate security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Employee training on data protection

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability

Set before you choose anything. Only what the site cannot work without:

• next-auth.session-token (named __Secure-next-auth.session-token over HTTPS), with the matching CSRF and callback cookies. Written when you sign in, expires one week later, and keeps you signed in between pages. Signed-out visitors never receive it.
• toolstube.consent is not a cookie: it is a browser local storage entry holding your cookie choice, the version of the question you answered and when you answered it. It stays until you change it or clear this browser, and it is never sent to us or to anyone else.

Legal basis: § 25 (2) TDDDG, and Art. 6 (1)(f) GDPR, since these are strictly necessary to deliver a service you asked for.

Set only after you accept. Google Analytics 4 writes two first-party cookies:

• _ga — a random visitor identifier, 2 years.
• _ga_DH93N7ELP7 — the analytics session state for this site, 2 years.

Until you press Accept, the Google Analytics script is not loaded at all: no cookie is written, and no measurement request is made. Rejecting, or closing the banner without answering, leaves it unloaded. The page does still open a connection to Google Fonts, which serves the typeface and is not analytics. On top of that, the first thing every page does is tell Google that analytics storage, ad storage, ad user data and ad personalisation are all denied; acceptance lifts the analytics denial only. We run no advertising products, never grant the three advertising signals, and show no adverts. We do query the Google Ads API, but only for keyword search volumes — it advertises nothing to you.

Legal basis: your consent, Art. 6 (1)(a) GDPR and § 25 (1) TDDDG.

Changing your mind. Cookie settings reopens the banner, and the two buttons carry equal weight. The same link is in the footer of every page that has one. Choosing Reject deletes the two Google Analytics cookies from this browser and stops the tag being loaded again. A tab that already loaded it before you withdrew keeps the script in memory until it is reloaded, though it is told not to measure. Withdrawal works from that moment on; it cannot recall data already received by Google, which you can ask Google to delete separately.

• Google Analytics 4 (Google Ireland Limited, with Google LLC in the United States as a sub-processor), loaded from googletagmanager.com only after you accept. Because your browser requests it directly, Google receives your IP address along with the page you are on, your referrer and basic device information.
• Stripe handles payment. Starting a checkout hands you to Stripe, which sets its own cookies on its own domain under its own policy. We never see your card number.
• Cloudflare Turnstile protects the sign-up and contact forms from automated abuse. It loads on those pages without asking, because a form that cannot tell a bot from a person is not a working form.
• The YouTube Data API answers the questions our tools ask about the channel or video you paste in. It runs on our servers and places nothing in your browser.
• OpenAI writes the drafts in the title, description and hashtag generators. The topic and keyword you type are sent to it to do that. Do not paste anything into those three tools you would not hand to a third party.
• The Google Ads API and Google Trends supply search-volume and trend figures for the keyword tool. They receive the phrase you searched for, not who searched it.
• Google Sign-In is offered as a way to log in. Using it tells us the name, email address and profile picture on that Google account, and tells Google that you signed in here.
• Zoho Mail sends our transactional email — verification, password resets, receipts — so it handles your address and the contents of those messages. Messages sent through the contact form are delivered to a Google-hosted mailbox we read.
• Our hosting and backup providers. The site and its database run on rented servers, and encrypted database backups are stored with an S3-compatible provider. Both therefore hold account data at rest.
• An HTTP proxy provider carries some of the requests our servers make to YouTube. It sees our traffic, not yours, and receives no personal data about you.

We do not sell your data, and none of the above is used to target advertising at you.

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data.

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

If you have any questions about this privacy policy, please contact us at: