Privacy Policy
Last updated: March 8, 2026
OmniToolsKit ("we," "our," or "us") is designed to process most tool actions client-side. This Privacy Policy explains what personal data we process, why we process it, and how users globally can exercise privacy rights.
1. Information We Collect
a. Newsletter Subscription Data
When you submit the footer newsletter form and explicitly check the consent checkbox, we process your email address and newsletter consent metadata (consent state and timestamp) via Plunk.
b. Contact Form Data
When you submit our contact form, we process first name, last name, email address, and message content to respond to your request. Contact submissions are not automatically added to marketing lists.
c. Cookie and Consent Preference Data
We store cookie preference choices in your browser (local storage key: omnitoolskit_cookie_consent_v1) to apply your selections and avoid showing the consent banner on every visit.
d. Analytics and Advertising Data
Where permitted by your cookie choices, analytics and ad partners may process technical usage signals such as page views, approximate location, device/browser details, and ad/attribution events.
e. Tool Processing Model
Most tool operations run locally in your browser and do not require file uploads. Some Web Utility tools submit request inputs to our server endpoints to produce results.
2. Purpose and Lawful Basis
- Newsletter emails: consent.
- Contact responses: legitimate interest and/or pre-contract communications.
- Analytics and advertising cookies: consent where required by law.
- Essential cookies and core site operation: legitimate interest.
- Web utility endpoint processing: legitimate interest in delivering requested tool functionality.
3. Processors and Vendors
We use data processors under applicable contractual terms (such as Data Processing Agreements where required).
- Plunk: newsletter subscription management and consent data.
- Upstash Redis: IP lookup performance caching with hashed IP keys retained for up to 30 minutes.
- Google Tag Manager / Google services: tag deployment, analytics, and advertising measurement where enabled by consent.
- Microsoft Clarity: site usage analytics where consented.
- Cloudflare Web Analytics: aggregated traffic and performance metrics.
- Email/service infrastructure: delivery of contact form communications and operational notices.
4. International Transfers
Some vendors process data in countries outside your home jurisdiction. Where required, we rely on transfer safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), UK transfer mechanisms, or equivalent lawful safeguards.
Vendor processing locations and transfer mechanisms may change over time according to each provider's infrastructure and legal terms.
5. Data Retention
We keep personal data only as long as reasonably necessary for the purposes described in this policy:
- Newsletter subscription records: until you unsubscribe or request deletion.
- Contact form submissions: up to 24 months after resolution unless longer retention is legally required.
- Cookie preference records in browser storage: up to 180 days before re-consent is requested.
- Analytics/advertising events: retained according to configured partner settings and applicable law.
6. Your Privacy Rights by Region
Depending on your location, you may have rights to:
- Access a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of your personal data.
- Object to or restrict certain processing.
- Withdraw consent at any time (for consent-based processing).
- Data portability where legally applicable.
- For certain US state laws: opt out of targeted advertising or certain data sharing where applicable.
We do not sell personal data for money. Some consented advertising activities may be treated as "sharing" under certain laws.
7. Data Subject Request (DSAR) Workflow
To submit a privacy request, email contact@omnitoolskit.com with subject line "Privacy Request".
Please include the email address used with our service and the specific request type (access, correction, deletion, or objection).
We may request reasonable verification information before fulfilling a request. We target responses within 30 days where required by law, subject to lawful extensions.
Newsletter subscribers can always withdraw marketing consent via the unsubscribe link in any marketing email.
8. Cookies
Essential cookies support core functionality. Non-essential analytics and advertising technologies are disabled by default until you opt in through the consent banner. See our Cookies Policy for details.
9. Data Security
We use HTTPS/TLS encryption for data transmitted between your browser and our services. We also apply access controls and data minimization for collected form data.
10. Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us so we can remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the effective revision date.
12. Contact Us
Questions about privacy or your rights? Contact us at contact@omnitoolskit.com