Privacy Policy

Last updated: 25 July 2026

This policy explains what data tools.intertoons.com collects, why, how long we keep it, and who else sees it. The site is operated by Intertoons Internet Services, Kochi, Kerala, India ("Intertoons", "we", "us").

Short version: we do not sell your data, we do not run third-party advertising or ad-retargeting trackers, and we keep only what we need to run and protect the service.

1. Data we collect automatically

Every page view is logged once for security, abuse prevention and aggregate traffic reporting. Each log row contains:

  • The path you visited (for example /tools/dns) and any query string
  • Your IP address, as supplied by Cloudflare
  • Your country, derived from that IP address
  • Your browser user-agent string
  • The referring URL, if your browser sent one
  • Your account email, if you are signed in
  • A timestamp

These visit logs are automatically deleted after 30 days by a daily scheduled job. Requests we identify as search-engine or automated crawlers are not logged at all.

Cloudflare, our hosting provider, additionally processes request metadata (IP, TLS details, timing) to route and protect traffic. That processing is governed by Cloudflare's privacy policy.

2. Data you submit to the tools

Most tools take an input — a domain, IP, URL, colour, block of text or JSON — and return a result. As a rule, we do not store these inputs beyond what is needed to answer the request. The path you requested is recorded in the visit log described above, so avoid putting sensitive values into a URL query string.

Specific exceptions, where storage is the point of the tool:

  • Image Hosting, Text Hosting and File Share — your file or text is stored in Cloudflare R2 and is reachable by anyone who has the generated link. Maximum size is 10 MB per upload. Uploads are automatically deleted 7 days after creation. Treat every upload as public: do not upload confidential material.
  • Webhook Tester — request headers and bodies delivered to your temporary endpoint are held transiently so you can inspect them, then discarded. Anyone with the endpoint URL can send data to it.
  • Anonymous Chat, Video Call and Visitor Call — message and call content is relayed peer-to-peer or through an ephemeral room and is not written to any database. Rooms disappear when they empty. We do log that a room was joined, for abuse handling.
  • Popup Generator, Lead Form Generator, Cron Builder, Snippet Validator and similar generators — configurations you save while signed in are stored against your account until you delete them. If you embed a generated lead form on your own website, submissions to it are stored so we can forward them to you; you are the controller of that data and are responsible for telling your own visitors about it.
  • Third-party lookups — tools such as WHOIS, DNS, PageSpeed Insights, IP Blacklist Check, SSL & Headers, ASN lookup and Technology Finder necessarily send your query (the domain, IP or URL) to the relevant registry, resolver or API. Those providers see the query and our server's address, and apply their own policies.

3. Accounts

An account is optional. If you create one we store your email address, your name where you supply it, and either a securely hashed password or a Google account identifier if you sign in with Google. Signing in with Google shares your email, name and profile picture with us under Google's terms; we never receive your Google password.

Sessions use a single HttpOnly, Secure, SameSite=Lax cookie that is valid for 30 days. It exists only to keep you signed in. We set no advertising, profiling or cross-site tracking cookies.

If you connect Telegram to receive notifications, we store the chat identifier needed to deliver those messages. You can disconnect it at any time from your account page.

4. Cookies and local storage

  • Session cookie — set only after you sign in. Strictly necessary.
  • Rate-limit counters — keyed by IP address in server-side storage, expiring within minutes. No cookie involved.
  • Browser local storage — some tools remember the last domain or URL you entered, and your theme choice, so you don't retype them. This never leaves your browser and you can clear it with your browser's site-data controls.

5. Third-party services we use

  • Cloudflare — hosting, edge compute, storage (KV, R2, D1) and DDoS protection.
  • Google Fonts — webfonts are loaded from Google's CDN, which receives your IP address as part of that request.
  • Google Sign-In — only if you choose it.
  • Google PageSpeed Insights API — only when you run that specific tool.
  • Resend — transactional email delivery (for example, lead-form notifications).
  • Telegram — notification delivery, if you have connected it.
  • Public DNS, WHOIS, RBL and ASN data sources — queried live by the corresponding tools.

The site administrator may add analytics or tag-manager code to the page head. If such a tool is active it may set its own cookies under its own policy. We do not add third-party advertising or retargeting pixels.

6. How we use the data

  • To deliver the result you asked for
  • To enforce rate limits and detect abuse, scraping and attacks
  • To understand which tools are used, in aggregate, so we can improve them
  • To keep you signed in and show you your own saved items
  • To meet a legal obligation or respond to a lawful request

We do not sell, rent or trade personal data. We do not use your queries to build an advertising profile. We do not share your data with anyone except the service providers listed above, acting on our instructions.

7. Retention summary

  • Visit logs — 30 days, then permanently deleted
  • Uploads (image, text, file share) — 7 days, then permanently deleted
  • Rate-limit counters — minutes
  • Chat, video and webhook payloads — ephemeral; not persisted
  • Account records and saved configurations — until you ask us to delete them

8. Security

All traffic is served over HTTPS. Passwords are stored only as salted hashes. Outbound requests made on your behalf are validated to block requests aimed at private and internal network ranges. That said, no internet service is perfectly secure, and the hosting tools in particular are designed to produce publicly reachable links.

9. Children

This site is intended for developers and other professional users and is not directed at children under 13. We do not knowingly collect personal data from them.

10. Your rights

You can ask us to access, correct, export or delete the personal data we hold about you, and you can withdraw consent for optional features such as Telegram notifications at any time. Email info@intertoons.com from the address on your account and we will respond within 30 days. Note that visit logs older than 30 days are already gone, and uploads older than 7 days cannot be recovered.

11. International transfers

We operate from India on a global edge network, so your data may be processed in whichever country the nearest Cloudflare location sits in, as well as in the United States and India by the providers named above.

12. Changes

We will update this page when our practices change and revise the "last updated" date above. Material changes will be noted on the homepage. Continuing to use the site after a change means you accept the revised policy.

13. Contact

Intertoons Internet Services, Kochi, Kerala, India — info@intertoons.com · intertoons.com

See also: Terms of Use · Fair Usage Policy · About