Privacy Policy

Who we are

SmarToolbox is operated by HungryMinded. We publish curated AI tool listings, articles, and prompt examples. For privacy questions or data requests, contact us at [email protected] or through our contact page.

Information we collect

• Information you provide: name, email address, message content, tool submissions, or other details you choose to send us.
• Basic technical data: browser/device information, approximate location from request metadata, timestamps, pages visited, and security logs needed to run the site.
• Analytics data: if analytics is allowed, Google Analytics receives page views and product events such as tool_click, tool name/slug/category, outbound redirect URL, and placement.
• Affiliate redirect data: when you click a tracked tool link, our Cloudflare D1 database may record the tracking ID, time, source page, referrer, country, hashed user-agent, and Cloudflare request metadata such as colo/ASN.
• Cookie/local storage choices: we store your analytics consent choice in this browser.

We do not intentionally collect sensitive personal data through normal site analytics, and we do not store raw IP addresses in affiliate click records.

Cookies, analytics, and consent

We use Google Analytics 4 to understand which pages and tools are useful. Analytics storage is denied by default before consent is resolved. Visitors in the EEA, United Kingdom, and Switzerland are shown an analytics consent banner. Visitors outside those regions may be placed into analytics automatically where permitted by applicable law. If we cannot determine the region, we fail closed and ask for consent.

We do not enable Google Ads storage, ad personalization, or ad user data through the Smartoolbox analytics setup. Analytics choices can be changed with the controls below.

Affiliate links and outbound clicks

Some tool links may be affiliate or tracked redirect links. Clicking them can send you to a third-party website and may allow us to earn a commission or measure tool interest. We use affiliate redirect logs to debug attribution, filter internal testing, and understand which tools are being clicked. Third-party sites have their own privacy policies.

Legal bases

• Consent: analytics cookies/events where consent is required or requested.
• Legitimate interests: operating the site, measuring aggregated tool interest, preventing abuse, debugging affiliate redirects, and improving content.
• Contract or pre-contractual steps: responding to submissions, questions, or requests you send us.
• Legal obligation: keeping records needed to comply with applicable law.

Service providers and international transfers

We use providers such as Cloudflare for hosting, security, edge logs, Pages Functions, and D1 storage, and Google Analytics for analytics. These providers may process data in countries outside your country of residence. Where required, we rely on appropriate safeguards such as contractual protections and data-transfer mechanisms offered by those providers.

Retention

• Google Analytics event and user data retention is set to 14 months.
• Affiliate redirect logs are kept only as long as useful for reporting, attribution checks, fraud/noise filtering, and site improvement.
• Contact or submission messages are kept as long as needed to respond, maintain records, and operate the site.
• Local browser consent choices remain until you clear site data or change them on this page.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You can also withdraw analytics consent at any time using the controls above.

We can usually action requests for information you directly provided to us, such as contact messages, submissions, and related correspondence. Some analytics and affiliate-click records are intentionally limited or pseudonymous, for example hashed user-agent data, approximate country, source page, and event timestamps. If we cannot reasonably identify which pseudonymous record belongs to you, we may not be able to provide, correct, or delete that specific record, but you can still reject analytics cookies and clear this site's local browser data.

To exercise rights, contact [email protected]. We may need enough information to verify and locate your request. If you are in the EEA/UK/CH, you may also lodge a complaint with your local data protection authority.

Security

We use HTTPS, access controls, provider-side security features, and privacy-preserving identifiers where practical. No website can guarantee perfect security, but we limit the data we collect and avoid storing raw IP addresses in affiliate click analytics.

Changes

We may update this policy as Smartoolbox changes. Material changes will be posted on this page with an updated date.