Privacy policy — Tooliz Extension

In short

The Tooliz extension (browser side panel), published by Studioz, collects no usage data. What you do in the extension (screenshots, PDFs, texts, analysed pages…) is processed and kept in your browser. No account, no trackers, no ads. The only data that leaves your device is what you choose to send, detailed below.

Publisher

Quentin (QuentinRG), an independent developer publishing as Studioz, Paris, France. Contact: studioz.dev.fr@gmail.com.

Local storage

Notes, snippets, tab sessions, history, colours, passwords, preferences and any licence key are stored only in your browser’s storage (chrome.storage). Screenshots and their annotations are kept in the browser’s local storage (IndexedDB, last 12 captures). None of this is sent to any server. You can delete everything by clearing the extension’s data or uninstalling it, and export your data to a file from Settings.

One exception: if you activate a Premium trial, a record of that trial (the trial key and its end date) is also saved in Chrome’s synced storage (chrome.storage.sync), so that the trial is limited to one per account. If Chrome sync is turned on, Google syncs this record across your devices under its own rules.

Web pages, screenshots and files

• Screenshot and page extractor: the active tab’s page is read only when you ask for it (a button or the right-click menu). Reading happens locally and does not change the page; the result is not sent anywhere.
• PDF tools, images, hashing, text compare, JWT, Markdown…: your files and texts are processed entirely in your browser. They are never uploaded.
• To show some previews (site icons in tab sessions, images listed by the extractor), your browser loads those images from the sites concerned, as during a normal visit.

Password vault

The vault is encrypted with AES-GCM, using a key derived from your passphrase with PBKDF2 (150,000 iterations). The passphrase is never stored: only the encrypted content is kept. Without it, nobody — not even the publisher — can read the vault.

Permissions

• sidePanel: show Tooliz in the browser’s side panel.
• storage: save your data and preferences locally, on your device.
• tabs: read the address and title of the active tab, only when a tool needs it at your request (QR code of the page, snippet variables), list your open tabs when you save a session, and open pages (purchase, screenshot editor). This information is not sent.
• scripting and activeTab: read the active tab’s page when you run the page extractor or a screenshot, only on that tab and at your request.
• contextMenus: add right-click shortcuts (capture the page, QR code, analyse the page, save a selection as a snippet). Nothing is read until you click.
• alarms: end the timer on time, even when the panel is closed.
• notifications (optional, requested only if you turn it on): alert you when the timer ends.
• Site access (optional, requested only when needed, for one site or all sites as you choose): allow analysing or capturing a tab when temporary access is not enough. You can revoke it at any time in your browser’s settings.

Data sent

• Exchange rates (converter): a request to open.er-api.com fetches the day’s rates. It contains no personal data. Offline, built-in rates are used.
• Premium licence and trial: only if you activate a key, it is sent to Gumroad’s API (api.gumroad.com) to check that it is valid. During a trial, the trial key is re-checked periodically (about every 6 hours) to verify its end date.
• Idea box: only if you send a message, the following is sent to a Google Forms form owned by the publisher: your message, your email address if you choose to give it, and Tooliz’s version and language. It is used only to improve the extension and, if you asked for it, to reply to you. It is stored by Google on the publisher’s behalf, under Google’s privacy policy.
• Uninstall: after an uninstall, the browser opens the same form, pre-filled with Tooliz’s version and language. Answering is optional; nothing is sent if you close the page.

Like any connection, these requests send your IP address to the service called.

Buying the licence and the trial

The Premium licence and the free trial are delivered by Gumroad. Any payment is processed by Gumroad under its own privacy policy. Gumroad shares with the seller the information needed for the order, such as the buyer’s email address, used only for order follow-up, sending the key and support.

Tracking and advertising

The extension includes no analytics, no tracking cookies and no ads. A usage counter stays in your browser and is only used to suggest, once, rating the extension. No data is sold or shared with third parties.

Your rights

You can ask for access to, correction or deletion of data related to a purchase, a trial or a message sent through the idea box by writing to studioz.dev.fr@gmail.com, or contact the French data protection authority, CNIL (cnil.fr).

Changes

This policy may change as the extension evolves. The date at the top shows the latest update.