Legal review pendingThis text describes how the site actually works, but it has not been reviewed by a legal professional and does not guarantee compliance with Spanish, EU or international law. Review by a legal professional is recommended.
Data controller
Owner: Qazi Muhammad Bilal. Tax ID: Y7026475N. Address: Avenida de la Libertad 31, planta 2, puerta D, 28917 Leganés (Madrid), España. Email: contacto@todotoolsonline.com.
Summary
There are no user accounts or sign-up forms. Most tools process your files and text in your browser without sending them to any server. The usage statistics collected are explained below.
Tools that run in your browser
The PDF, image, document and spreadsheet, text, developer, QR and barcode tools, the calculators and the invoice generator process data on your device. Their content is not sent to TodoToolsOnline or third parties and is not stored: it disappears when you close or reload the page.
The QR reader only uses the camera if you press “Start” and grant permission; the image is analysed on your device.
Website checks
When you use the SEO audit, performance checker or accessibility checker with a web address, that address is sent to our server, which downloads the public page (and its robots.txt, sitemap or resources, depending on the tool) to analyse it. Results are returned to your browser and not stored.
To prevent abuse, the server counts each IP address's requests in memory over the last minute; addresses with no recent activity are discarded within the next minute. That count is not written to disk or used for anything else.
If the administrator enables Google PageSpeed Insights and you request it in the performance checker, the page address is also sent to Google, which analyses it under its own privacy policy.
AI tools (translation, proofreading, documents, invoices, audio)
When you use the translator, grammar checker, rewriter, chat with PDF, document Q&A, invoice extractor, chapter generator, infographic, transcription or subtitles, the content you provide is sent to our server, which forwards it to the AI provider the administrator configures (the receiving host is shown on each tool) to produce the result. TodoToolsOnline does not store or log that content.
What exactly is sent: in the translator, grammar checker, rewriter and infographic, the text you paste; in chat with PDF and document Q&A, only a few passages of the document chosen in your browser (never the whole file); in the invoice extractor, the text of the invoice (at most 12,000 characters); in the chapter generator, the transcript sampled by time block; in transcription and subtitles, only the audio, converted in your browser to mono MP3 (never the video).
The provider handles the text under its own privacy and retention policy, which we do not control. Do not enter sensitive personal data, passwords or confidential information.
To prevent abuse, the server counts each IP address's requests in memory over the last minute and the daily total; those counters are not written to disk. If the administrator has not configured a provider, these tools process nothing and send your text nowhere.
Server technical logs
The server hosting the site (Hostinger (Fráncfort, Alemania / Frankfurt, Germany)) records technical data about each visit (IP address, date, page requested, browser) for security and abuse detection. Retention period for those logs: about 14 days, after which they are deleted automatically. The hosting provider may also record its own technical data.
Usage statistics
Google Analytics 4, only if you accept “Analytics” in the privacy notice: Google receives the pages you visit (without search parameters) and technical browser data, and uses its own cookies to count visits. Advertising signals are switched off. You can withdraw consent under “Cookie settings”. See Google's privacy policy.
Advertising
The site currently shows no advertising and loads no ad scripts. If advertising is enabled in the future (the service is intended to be funded by ads), nothing will load until you accept it, and this policy will be updated first.
Administration access
Administration panel: only the site administrator signs in. Their session uses a strictly necessary technical cookie (visitors are not affected). Sign-in attempts are kept for 30 days with the IP address irreversibly hashed, to stop attacks.
Legal basis and retention
Website-check requests and technical logs are processed on the basis of legitimate interest in providing and protecting the service. Personalised advertising, if enabled, will be based on your consent, which you can withdraw at any time. These bases must be reviewed by a professional before the site goes live.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to contacto@todotoolsonline.com. You may also complain to the Spanish Data Protection Agency (www.aepd.es) or your local authority.
Last updated: 2026-10-13