Privacy Policy

Last updated 25 October 2026

This page explains what personal data tooldrop.dev collects, why, and what you can do about it. tooldrop.dev is a curated directory of AI tools; it has no accounts, no comments and no tracking beyond what is described here.

Who is responsible

The data controller is Pasquale Gallo, VAT IT03599370362, Modena, Italy. You can reach him at [email protected].

What we collect and why

Visiting the site

tooldrop.dev is a static website hosted by Hetzner Online GmbH (Gunzenhausen, Germany, servers in the EU). Like every web server, the host keeps technical logs (IP address, browser, pages requested, time) for security and to keep the service running. Legal basis: legitimate interest. Retention: as set by the host, typically a few weeks.

Analytics

With your consent we may use Google Analytics 4 to understand which pages and listed tools get visited. Until you choose, analytics runs without cookies: it sends a cookieless ping and writes no analytics cookie. If you accept, it sets its cookies; if you decline, no analytics cookie is written. IP addresses are anonymised. Data is processed by Google Ireland Ltd and may be transferred to the United States under the EU–US Data Privacy Framework. Legal basis: consent, which you can withdraw at any time from the small dot in the bottom-right corner of any page. Retention: 14 months on Google's side.

Submitting a tool

When you suggest a tool through the form we receive the name, URL, category and location you enter, plus your email address, and we keep them in our mailbox (hosted by Infomaniak, Switzerland) to review the suggestion and reply if needed. The suggested tool may be added to the directory with a screenshot; your email address is never published. The form is protected by Cloudflare Turnstile (Cloudflare, Inc.), which receives your IP address, the token generated by the widget and technical data about your browser to tell people from bots. Legal basis: performance of your request and our legitimate interest in keeping the form usable. Retention: up to 12 months after the review.

Newsletter

If you subscribe, the form posts your address to this site's own server, which passes it to Brevo (Sendinblue SAS, France — servers in the EU) to store it and send the newsletter. Subscription requires confirmation by email (double opt-in): nothing is stored until you click the link. Every message has a one-click unsubscribe link. Legal basis: consent. Retention: until you unsubscribe.

Some entries may be paid placements. They are labelled "Sponsored" on the card and on their own page, and their link goes through /go.php on this domain, which records the date, which entry was clicked, the page you came from and a one-way hash of your IP address that changes every day — enough to tell repeat clicks from different people, useless for identifying anyone — and then sends you to the sponsor. No cookie is set and the sponsor is told the number of clicks, nothing about who clicked. Legal basis: legitimate interest in measuring what we sell. Retention: 12 months.

Listed tools

The directory shows the public name, URL and a screenshot of tools. This information is already public; it is published under our legitimate interest in running a directory. If you own a listed tool and want it changed or removed, write to [email protected] and it will be done promptly.

Cookies

See the Cookie Policy for the full list. In short: one technical entry in your browser storage remembers your cookie choice, and Google Analytics cookies are set only after consent.

Your rights

Under the GDPR you can ask to access, correct, delete or export your data, restrict or object to its processing, and withdraw consent at any time. Write to [email protected]. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes

This policy may be updated when the site changes; the date at the top tells you when. Substantial changes will be noted on this page.