Privacy Policy
Last updated: August 23, 2026
This Privacy Policy explains how PhotoToolFinder.com (the "Service") collects, uses, shares and protects information. PhotoToolFinder is a curated directory of third-party photo editing tools: you can browse it without an account, and it never asks you to upload or process your photos here. Editing happens on the third-party tools you choose to visit.
Information Collected
- Tool submissions: when you suggest a tool, everything you enter about it: name, URL, one-line and long descriptions, key features, when to use it and when not to, frequently asked questions, alternatives, category, pricing, platforms and other details. The logo image you upload, any notes to the reviewer and, optionally, your email address are stored with it.
- Corrections: when you report that something on a tool listing is wrong or out of date, the comment you write, the tool it is about, and, optionally, your email address.
- Contact emails: whatever you choose to include when you write to the address on the contact page: your email address, your name if you sign off with it, and the content of your message.
- Your IP address, when you submit something: if you suggest a tool or report a correction, the address your browser connected from is stored with it. Nothing else on the site stores one. Browsing the directory does not: the analytics described below counts a visit without keeping your address.
- Technical and usage data: aggregate page-view data and basic browser metadata, plus a small number of counted events: which outbound tool link was followed, whether a submission or correction was sent, and a short technical excerpt when a page hits a JavaScript error.
The Service runs no user accounts, hosts no image editor, and never receives or stores the photos you edit on third-party tools.
How Information Is Used
Information collected through the Service is used:
- To review tool submissions and, if accepted, list them in the directory.
- To check reported corrections and keep listings accurate.
- To read and respond to contact and support messages.
- To understand aggregate traffic, so the directory can be maintained and improved.
- To keep the two open forms usable: the stored IP allows rate-limiting, and tracing a flood of spam or automated submissions back to a source.
- To comply with legal obligations and enforce the Terms.
Cookies and Local Storage
This site sets no cookies. It carries no advertising and does not track you across sites. There is no account or login, so there is no session to keep. Browsing is served as static files.
One thing is stored on your device. If you start filling in the Suggest a tool form and navigate away, your answers are saved in your browser's local storage so the form is still there when you come back. It stays on your device, it is never sent anywhere unless you press submit, and clearing your browser data removes it. Any logo you choose is never included in that saved draft.
If a security challenge ever has to be switched on to deal with an attack, the network provider serving the site may set a single strictly necessary cookie to record that your browser passed it. It carries no profile and is not used for analytics or advertising.
The analytics used here is cookieless: it sets nothing on your device and reads nothing back. See Analytics below.
Analytics
Aggregate page usage is measured with GoatCounter, a privacy-friendly and cookieless analytics tool. It runs as a self-hosted copy on the Service's own server, so no third-party analytics company receives this traffic.
- It does not build advertising profiles or track you across sites.
- IP addresses are not stored in the analytics data. At most they are used briefly, in memory, to tell one visit from another.
- Alongside page views, a few events are counted: which outbound tool link was followed, whether a tool suggestion or a correction was sent successfully, and technical faults such as a JavaScript error or a failed send. Error events carry a short excerpt of the technical message only, never anything you typed.
Tool Submissions
Tool submissions are stored in the Service's own database and reviewed by a person before anything is listed. What you submit about the tool, including the logo you upload, is intended for publication, and may be edited or shortened before it goes live, or declined. Your notes to the reviewer are never published. Providing your email is optional. If you do, it is used only to credit you or follow up about your submission. It is never shown publicly.
Corrections to Listings
A correction is stored in the Service's own database alongside the tool it is about, and is read by a person. Corrections are never published: what may change is the listing itself, once the point you raised has been checked. They are kept for as long as that listing is in the directory, so the reviewer can see what has already been reported about it. Providing your email is optional. If you do, it is used only to follow up on your correction. It is never shown publicly.
Contact Emails
There is no contact form: the contact page simply publishes an email address, so a message you send arrives in the operator's mailbox and is handled by an email provider. It is used only to reply to you and to keep a record of the exchange. Please avoid including sensitive personal information in your message unless it is necessary.
Outbound and Affiliate Links
The directory links out to third-party tools, each of which has its own privacy policy and terms that the Service does not control. Some outbound links are affiliate links, which may earn the Service a commission at no extra cost to you. This never affects the price you pay or how tools are ranked.
The site also links to a Ko-fi page where you can support the directory if you want to. Following that link takes you to Ko-fi, which handles the payment and your details under its own privacy policy. Your card details are never seen by the Service, and supporting the directory is entirely optional.
Service Providers
Information is shared only as needed to operate the Service, with providers such as:
- Cloud hosting and content-delivery providers that serve the site and run the backend.
- A logging and monitoring provider that receives the server logs, so errors and abuse are visible.
- An email provider that receives and stores the messages you send.
- A donations provider, if you choose to support the site.
Personal information is not sold.
International Data Transfers
The Service is available globally, so information may be processed in countries other than where you live. Where required, appropriate safeguards are applied to such transfers.
Data Retention
- Tool submissions: kept while under review and, if listed, for as long as the tool remains in the directory.
- Corrections: kept for as long as the listing they are about remains in the directory, and deleted with it.
- Contact emails: kept as long as needed to respond and maintain support records.
- IP addresses: erased on a rolling schedule, currently 30 days after the submission or correction they were stored with. A scheduled job on the backend blanks them, and the submission or correction itself stays.
- Server logs: held by the logging provider on a short rolling window, currently around 30 days, then deleted.
- Analytics: retained only in aggregate, with no IP addresses in it.
Security
Reasonable technical and organizational measures are used to protect information. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.
Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete or restrict the processing of your personal data, or to object to it. To make a request, use the contact page. Your identity may need to be verified before a request is acted on.
EEA, UK and Switzerland
- The legal bases for processing are performing an action you request (listing a submission, answering a message), the legitimate interests of running and improving the directory and keeping the open forms free of spam and abuse, and compliance with law.
- You have the right to lodge a complaint with your local data protection authority.
U.S. State Privacy (Including California)
- Personal information is not sold for money.
- Personal information is not shared for cross-context behavioral advertising.
- No financial incentives are offered in exchange for personal information.
- California and other state residents may request access to, or deletion of, their personal information, subject to legal exceptions, via the contact page.
Children's Privacy
The Service is not directed to children under 13, and personal data is not knowingly collected from them. If you believe a child has provided personal data, please use the contact page so it can be deleted.
Automated Decisions
The Service does not profile you and makes no automated decisions about you. Every submission and every correction is read by a person.
Who Controls Your Data
PhotoToolFinder is independently operated by Meghashyam Chirravoori, who is the data controller for the information described here. For privacy questions, requests or complaints, please use the contact page.
Changes to This Policy
This Privacy Policy may be updated from time to time. Any update revises the "Last updated" date above.