Privacy Policy

Information we collect

We collect information you provide, such as account details, support messages, and billing information handled through our payment service. We also receive basic technical information such as browser type, device type, referring page, requested URLs, and timestamps needed to operate, secure, and understand the service.

The public QR and image tools process entirely in your browser. Tool Swim does not receive their payloads, URLs, Wi-Fi credentials, contact or message fields, filenames, file bytes, pixels, EXIF, or generated content. Calling the separate developer API intentionally sends its bounded request to Tool Swim under the API retention terms.

How we use information

We use information to provide and maintain tools, authenticate accounts, manage API keys, apply rate limits, record content-free execution metadata, measure credits, process payments, prevent abuse, respond to support requests, and improve reliability. We do not sell personal information or use uploaded content to advertise to you.

Developer API and logs

Developer API requests are a separate explicit server boundary. Execution logs can retain request id, workspace and API key identifiers, tool and operation, status, byte-count summaries, credit estimates and settlement, timing, error code, and an idempotency-key hash. They do not retain the raw API secret or QR payload by default. Log retention follows the active plan and scheduled deletion policy.

Optional telemetry

Optional first-party telemetry, when offered, requires affirmative consent and is limited to allowlisted coarse facts such as route, tool and operation ids, broad size or duration buckets, outcome, browser or device class, and consent state. It never contains user-entered values, secrets, filenames, files, pixels, EXIF, precise identifying dimensions, or free-form input and error text. Public tools work fully when telemetry is declined or blocked.

Service providers and disclosure

We share information with service providers only as needed for hosting, authentication, payments, storage for explicit server features, email, security, and customer support. We may also disclose information when required by law, to protect users and the service, or as part of a business transaction where appropriate safeguards apply.

Retention and security

We keep account, billing, security, support, and developer API records only as long as needed for the purposes described here, plan-specific retention, legal obligations, and dispute resolution. No security method is perfect, but we use administrative and technical safeguards appropriate to the information we handle.

Your choices

You may ask to access, correct, export, or delete personal information associated with your account. Some records may be retained where required for security, fraud prevention, payments, or legal compliance. You can control browser storage through your browser and learn more on the cookie policy page.

Children and changes

Tool Swim is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as the service changes. The date above identifies the latest version; material changes will be communicated through the service when appropriate.