Legal
Privacy policy
Last updated: 22 August 2026
Toolora is a UK tool-discovery site. This page explains what we collect, why, and how to ask us about it.
Who we are
Toolora is operated by Ryan Smith as a sole-trader product in the United Kingdom. Site: https://toolora-two.vercel.app. We are not the vendors whose tools we list.
What we collect
- Listings you submit: tool name, website, description, category, optional affiliate URL, and the listing tier you chose.
- Paid listings: Stripe customer and subscription IDs and payment status. Card numbers never touch Toolora; Stripe Checkout collects them.
- Preferences: locale and compare choices stored in your browser (localStorage), not on our servers.
- Technical: a CSRF cookie on the listing form, standard server logs (time, path, error), and rate-limit counters.
- Analytics: Vercel Web Analytics page views (privacy-oriented, no advertising profile). See below.
Why we use it
- Publish and review the public catalogue.
- Take listing payments and show the right plan status.
- Keep the form and affiliate hops safe (CSRF, rate limits).
- See which pages are used so we can fix broken ones.
- Attribute outbound clicks (Amazon Associates and other partner programmes when enrolled).
Affiliate tracking
“Get it here” goes through /go/[slug] so we can attach our partner IDs. Amazon Associates uses tag toolora21-21 on amazon.co.uk. Impact, ShareASale, and PartnerStack IDs are added the same way once those programmes accept Toolora. We do not sell your browsing history to those networks.
Analytics and cookies
Vercel Web Analytics records page views and referrers. It is not Google Analytics and is not used to build an ad profile. The listing form uses a SameSite CSRF cookie so only this site can submit it. Stripe sets its own cookies on stripe.com during checkout. We do not run a third-party advertising pixel.
Who we share with
- Vercel — hosting and Web Analytics.
- Neon — listing database.
- Stripe — paid listing checkout and billing.
- Amazon and other affiliate networks — only the click that you started, so a purchase can be attributed.
We do not sell personal data. Hosts may process data in the US or EU under their own terms.
How long we keep it
Approved listings stay while they are in the catalogue. Stripe keeps billing records under its own rules. Server logs are rotated as part of hosting. Browser preferences stay until you clear site data.
Your rights (UK GDPR)
You can ask for a copy of listing data we hold about you, ask us to correct it, or ask us to delete a listing you submitted. Paid billing records may need to stay for tax and fraud prevention. To exercise these rights, use the contact route below.
Children
Toolora is not aimed at children under 13. Do not submit a listing for a child.
Contact
Privacy requests: submit a listing named “Privacy request” via List a tool (Basic / free) and describe what you need, or use the email on your Stripe receipt if you paid for a listing. See also Terms and Security.