This policy explains what happens to your data when you use ToolHare. The short version: the tools run in your browser, we do not ask you to sign up, and we use privacy-friendly analytics that do not identify you.
Who we are
ToolHare is operated by BOSH Group (the "data controller" for the purposes of UK data-protection law). For any privacy question, email [email protected].
What we collect
- The tools themselves: the numbers and text you type into a tool are processed in your browser to produce a result. We do not send that input to our servers or store it, unless a tool explicitly says it needs the server. Two kinds of tool do: the word-game solvers look words up server-side (they receive only your letters, not personal data), and the networking tools need your IP address, which is covered in the next section.
- Analytics: we use cookieless analytics to count visits and see which tools are popular. It does not use cookies, does not build a profile of you, and does not collect personal data.
- No accounts: there is no login, so we hold no names, emails or passwords unless you choose to email us.
Servers, logs and infrastructure
Your IP address is not something a website can choose to receive: it is part of every request, because without it the reply has nowhere to go. Under UK GDPR an IP address is personal data, so this section sets out plainly what happens to yours.
- Our hosting provider runs the web server that serves these pages and, like effectively every web server, keeps standard access logs containing IP addresses, timestamps and requested URLs. These are operational records used for security and fault diagnosis, kept for a limited period and then deleted.
- Cloudflare sits in front of the site as a content delivery network and security layer. Traffic passes through their network, which means Cloudflare also processes your IP address. Cloudflare is a US company operating globally, so this involves an international transfer, made under the safeguards in Cloudflare's data processing terms.
- The networking tools (What is my IP address and IP address lookup) show you your own IP address and information about it. To do that our server reads the address your request arrived from and looks it up against a geolocation database held on our own server — your address is not sent to any third-party lookup service. We do not write it to a database, associate it with anything else, or keep it after the response is sent.
So the honest position is this: the application does not store your IP address, but the web server underneath it keeps ordinary access logs, as every web server does. We would rather say that clearly than claim a zero we cannot deliver.
Our lawful basis for processing your IP address in this way is legitimate interests (Article 6(1)(f) UK GDPR) — operating and securing the site, and providing the tool you asked for. We do not rely on consent here, because a refusal could not be honoured: the processing is unavoidable in serving you the page you requested. You can object to processing based on legitimate interests; see your rights below.
Advertising
We show adverts via Google AdSense to support the site. The AdSense script loads on every page so that Google can present its Consent Management Platform — a prompt asking whether you consent to personalised advertising. If you consent, Google may show personalised adverts and set advertising cookies. If you decline or dismiss the prompt, adverts are still shown but they are non-personalised and no advertising cookies are set. See our cookie policy for details on advertising cookies and how to change your choice.
Storage on your device
We store a short list of your recently used tools in your browser's local storage as a strictly necessary site preference, used to offer quick links back to tools you have used recently. This stays on your device, is never sent to us, and you can clear it at any time by clearing your browser storage.
Your rights
Under UK GDPR you have rights over your personal data, including access, correction and erasure, and the right to object to processing carried out on the basis of legitimate interests. Because we hold almost no personal data, there is usually little to act on — but if you have emailed us, you can ask us to delete that correspondence at any time. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Published by BOSH Group. Last updated 27 July 2026.