Effective date: July 18, 2026. This Policy applies to the 120365 Tools website, account system, and related online tools. We may collect: (1) account and contact information you provide, such as username, nickname, email address, profile details, and support communications; (2) information that Google, GitHub, QQ, or another provider clearly identifies on its authorization screen and that you authorize when signing in or linking an account, such as a provider-specific identifier, name, avatar, and email address—we do not receive your third-party password; (3) text, images, files, queries, comments, submissions, and other content you send to a tool; (4) transaction and entitlement records, such as order number, payment status, amount, currency, and Coin or score changes—we generally do not store complete card or third-party payment credentials; and (5) technical and security information, such as IP address, browser and device type, language, access times, feature usage, cookies, logs, errors, and security events. Please do not submit unnecessary sensitive personal information, another person's confidential information, or data you are not authorized to process.
We use information only as reasonably necessary to provide and improve the Services, including to create and maintain accounts; authenticate sign-ins and linked accounts; process tool tasks and files; display content you choose to publish; send verification codes and important account notices; process orders, Coins, and scores; provide support; prevent fraud and abuse; troubleshoot; measure service performance; and comply with law. Where applicable, our legal bases include performance of a contract, your consent, legitimate interests, and legal obligations. We do not sell or rent personal information, and we do not use information obtained from Google APIs or Google Sign-In for personalized advertising. We may disclose limited information to infrastructure, cloud storage, email, captcha and security, identity, payment, analytics, or support providers that need it for these purposes and are subject to appropriate contractual or confidentiality obligations. We may also disclose information at your direction or with your consent, in a corporate reorganization, or when lawfully required by courts, regulators, or public authorities. Public comments, submissions, nicknames, and avatars may be visible to other users and search engines, so review them before publishing.
We use necessary cookies, local storage, or similar technologies to keep you signed in, remember language and interface preferences, provide security, and operate core features. If analytics or performance measurement is enabled, additional non-essential technologies may be used to understand feature usage. You may restrict or delete cookies in your browser, but some sign-in and personalized features may stop working. Third-party sign-in, Cloudflare captcha, maps, email, payment, hosting, and analytics services process necessary data under their own privacy policies, which you should also review. Data received through Google Sign-In or Google APIs is used only within the permissions shown when you authorize access, for authentication, account creation or linking, account security, and features you explicitly request. We do not access other Google data without authorization; sell Google user data; use it for advertising; or permit humans to read it except when necessary to provide a feature you explicitly request, investigate security or technical issues, comply with law, or work with aggregated and anonymized data. Our use and transfer of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access in your Google Account's third-party connections settings.
We retain information for as long as needed to provide the Services, maintain transaction and security records, resolve disputes, and comply with law; periods vary by data type. Tool inputs and uploads may be temporary during processing or retained when you use history, publishing, synchronization, or archive features, as described by the relevant feature and your choices. After account deletion or a valid deletion request, we delete or anonymize information that is no longer needed within a reasonable period, although legally required order, audit, security, backup, or dispute records may remain until the applicable period expires, and backup copies may persist until normal rotation completes. We use reasonable safeguards such as access controls, encrypted transport, logging, and least-privilege practices, but no online service can guarantee absolute security. Subject to applicable law, you may request access, correction, a copy, deletion, or restriction of your personal information; withdraw consent; object to certain processing; or close your account. Withdrawal does not affect processing already lawfully completed. You may also revoke third-party sign-in access through the relevant provider. Submit a privacy request through the site's Contact Us page; after appropriate identity verification, we will respond within the period required by law or a reasonable period. The Services are not directed specifically to children below the age set by applicable law. A guardian who believes a child provided personal information without appropriate consent should contact us for deletion. Information may be processed by us or our providers outside your region, with safeguards required by applicable law. If we materially update this Policy, we will provide reasonable notice and update the effective date.