Privacy Policy
Effective October 15, 2026
ToolTier (tooltier.dev) is operated by 8zero7. We collect only what we need to sell and deliver digital packs and sponsorships. You can browse the rankings, tool pages and guides without an account, and we don't use advertising or tracking cookies.
Information we collect
- Purchase information. When you buy a pack, an All-Access subscription or a sponsorship, checkout happens on Stripe. We receive your email address, name if you give one, what you bought, the amount, and Stripe's payment and session IDs. We never see or store your full card number.
- Sponsor materials. If you sponsor ToolTier, we keep the company name, link, logo and blurb you send us so we can review, schedule and display the placement.
- Newsletter. If you sign up for the weekly “What Moved” email, we store your email address and its subscription status (pending, confirmed or unsubscribed). We email you a confirmation link first, and you aren't subscribed until you click it. Every newsletter has an unsubscribe link.
- Tool suggestions. If you suggest a tool, we store the tool name, URL, category and note you enter, plus your email only if you give one, and the time. Suggestions are reviewed by hand and never published automatically. Your email and note are never shown publicly.
- Community ratings. To rate a tool you enter your email, a 1–5 star rating and an optional comment. We email you a confirmation link, and only confirmed ratings count. We don't store your email address with the rating: we store a keyed hash of it so there's one rating per person per tool. Public pages only show an average and count once a tool has at least 5 ratings. Comments are held for moderation and aren't shown publicly. Unconfirmed ratings are deleted after 3 days.
- Spam protection. The suggestion and rating forms use Cloudflare Turnstile, which checks your browser for signs of automation and sends us a pass/fail result. We also count requests per IP address and per hashed email for short periods to limit abuse.
- Messages. If you email us, we keep the message and your address so we can reply.
- Technical logs. Our host, Vercel, processes standard request data (such as IP address, user agent, requested URL and time) to serve the site, keep it secure and debug errors. We don't use these logs to build profiles of visitors.
How we use it
- To deliver what you bought: we email your download links and receipt-related messages.
- To provide customer support, handle refunds and prevent fraud or abuse.
- To run sponsorships you've purchased.
- To meet legal, tax and accounting obligations.
We don't sell or rent personal information, we don't share it for cross-context behavioral advertising, and we only send the newsletter to people who confirmed their subscription.
Service providers
- Stripe processes payments. ToolTier sells through Stripe's managed payments, so Stripe acts as merchant of record and handles payment data, tax and receipts under the Stripe Privacy Policy.
- Resend sends our email (pack delivery, newsletter confirmations and the newsletter) and stores the newsletter subscriber list.
- Vercel hosts the website and processes server logs.
- Upstash (via Vercel) stores tool suggestions, community ratings and short-lived rate-limit counters.
- Cloudflare Turnstile provides the spam check on the suggestion and rating forms, under Cloudflare's privacy policy.
These providers process data on our behalf, or as independent controllers where their own terms say so. They may store data in the United States and other countries.
Cookies and local storage
ToolTier itself sets no cookies and runs no analytics or ad trackers. The Cloudflare Turnstile check on the suggestion and rating forms may use browser storage to do its job. Stripe's checkout pages, which are hosted by Stripe, use their own cookies to process payments and prevent fraud.
Download links
Pack download links in delivery emails are signed and expire 7 days after they're issued. If yours has expired, contact us and we'll send a new one.
Retention
We keep purchase and sponsorship records for as long as needed to provide the product, handle support and refunds, and meet tax and accounting requirements, which is typically several years. Newsletter addresses are kept while you're subscribed; after you unsubscribe we remove it from the newsletter list, and Resend may keep the contact record until you ask us to delete it. Unconfirmed signups are never added to the list. Suggestions are kept until reviewed and then for as long as useful for curating the rankings. Ratings (stored by hashed email) are kept while the tool is listed. To limit abuse, the signup form briefly counts requests per IP address in memory. Support emails are kept while useful for support, then deleted. Hosting logs are kept for the limited period set by Vercel.
Your rights
Depending on where you live, including the EU/UK (GDPR) and California (CCPA/CPRA), you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict certain processing, and not to be discriminated against for exercising these rights. We process purchase data to perform our contract with you and to meet legal obligations. To make a request, email jason@8zero7.com. We may need to verify your request, and we'll respond within the time required by law. You can also complain to your local data protection authority.
Children
ToolTier is not directed to children under 16, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.
Changes
If our practices change, we'll update this page and the effective date above. For material changes affecting customers, we'll make reasonable efforts to notify you.
Contact
8zero7 · jason@8zero7.com
