Last updated: March 5, 2026
Tool Atlas ("we", "us", "our") operates the website at thetoolatlas.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.
If you have any questions or wish to exercise your rights, please contact us at privacy@thetoolatlas.com.
The data controller responsible for your personal data is:
We collect the following categories of personal data:
When you purchase advertising space we collect: your email address, company/brand name, the image URL you submit, and your website URL. We also store the grid coordinates of your purchased area, the purchase price, and the date of purchase.
Lawful basis: performance of a contract (Article 6(1)(b) GDPR) — this data is necessary to fulfil your purchase and place your block on the grid.
If you claim a business listing you provide your email address and create a password (stored as a secure bcrypt hash — we never store your plain-text password). You may also optionally provide business details such as address, phone, description, and social media links.
Lawful basis: performance of a contract (Article 6(1)(b) GDPR) — to provide you with account access and business management features.
When you submit a review you provide your name (displayed publicly after approval), an optional email address (not displayed publicly; used only for internal moderation), a star rating, and review text.
Lawful basis: legitimate interests (Article 6(1)(f) GDPR) — enabling genuine public reviews is a legitimate interest of both the business being reviewed and the general public.
We record page views on business profile pages to provide owners with visitor statistics. We store a hashed, anonymised token derived from your IP address and the current date using SHA-256. Your raw IP address is never stored. The hash changes daily and cannot be reversed to identify you.
Lawful basis: legitimate interests (Article 6(1)(f) GDPR) — providing business owners with aggregated, anonymised traffic insights.
We use a PHP session cookie (PHPSESSID) to maintain your login session if you are a business owner. This cookie is deleted when you close your browser or log out. No consent is required for this cookie as it is essential for the service to function.
With your consent, we use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 sets cookies (_ga, _ga_*) that persist for up to 2 years. Google Analytics data is processed by Google LLC under the EU–US Data Privacy Framework.
You can change your analytics preference at any time using the button below:
Stripe may set cookies during the payment checkout process for fraud prevention and security. These are strictly necessary for completing payments. Google Fonts is loaded from fonts.googleapis.com; Google may log the request but we do not receive personal data from this service.
We do not sell your personal data. We share data only with the following processors as necessary to operate the service:
| Processor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | USA (EU–US DPF) |
| Google LLC | Analytics (GA4) — consent-gated | USA (EU–US DPF) |
| Hostinger | Website hosting & database | EU / Lithuania |
If you are located in the European Economic Area (EEA) or UK, you have the following rights:
To exercise any of these rights, email us at privacy@thetoolatlas.com. We will respond within 30 days.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Passwords are hashed using bcrypt. Payments are handled entirely by Stripe — we never receive or store your card details. Our website is served over HTTPS.
Tool Atlas is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after changes are posted constitutes your acknowledgement of the updated policy.
For any privacy-related questions, data subject requests, or to withdraw consent, please contact: