TolReport

Privacy Policy

Effective date: September 2026

This Privacy Policy describes how Kevin Lund DBA TolReport ("we", "us", or "our") handles your information when you use TolReport ("Service").

1. The Short Version

How we handle your data depends on whether you're signed in:

  • Not signed in: Your project data stays entirely in your browser (localStorage). We do not receive or store your projects.
  • Signed in: Your projects are stored on our servers (Cloudflare) tied to your account email. This enables cross-device access and serves as a backup. You can delete projects in the app or request full account deletion.

There is no CAD file upload—analysis runs in your browser. PDF exports are generated client-side.

2. Information We Collect

Account Information (Signed-In Users)

  • Email Address: Used for authentication, account recovery, and transactional emails (receipts, subscription confirmations).
  • Password: Stored as a secure hash (PBKDF2-SHA256, 100k iterations). We cannot see your plaintext password.
  • Project Data: When signed in, your tolerance stack-ups, dimensions, assumptions, and project settings are stored on our servers to enable cross-device sync. This data is tied to your account email.

Payment Information

  • When you subscribe to Pro, billing details are collected and processed by Stripe. We receive your email address and subscription status but do not store credit card numbers.

Information NOT Collected

  • Anonymous User Projects: If you use TolReport without signing in, your project data exists only in your browser's localStorage. We never receive it.
  • CAD Files: TolReport does not accept CAD file uploads. No design files are transmitted to our servers.

Information Collected Automatically

  • Analytics: We use PostHog to understand page visits and product usage patterns. Analytics track events like page views and feature usage—not the content of your stack-ups. You can use browser extensions to block analytics if you prefer.
  • Server Logs: Our hosting provider (Cloudflare) may log IP addresses and request metadata for security and operational purposes.

3. How We Use Your Information

  • Authenticate your account and enable cross-device project sync
  • Process Pro subscription payments via Stripe
  • Send transactional emails (magic links, receipts, subscription confirmations)
  • Respond to support requests
  • Improve the Service based on aggregated, anonymized usage data

4. Data Storage

Anonymous Users (Not Signed In)

All project data is stored in your browser's localStorage. This data:

  • Never leaves your device
  • Is deleted if you clear browser data
  • Is not synced across devices or browsers
  • Is your responsibility to back up (export to PDF)

Signed-In Users

Project data is stored on our servers (Cloudflare Workers KV) and cached locally:

  • Projects are tied to your account email
  • Data syncs automatically when you sign in on a new device
  • Local changes are saved to the server within a few seconds
  • You can delete individual projects in the app
  • Contact support@tolreport.com for full account deletion

5. Data Sharing

We do not sell your personal information. We share information only with:

6. Cookies

We use essential cookies required for the Service to function:

  • Session cookie: Keeps you signed in (httpOnly, secure)
  • Stripe checkout: Required for payment processing

We do not use advertising or third-party tracking cookies.

7. Data Security

The Service is delivered over HTTPS. Passwords are hashed with PBKDF2-SHA256 (100k iterations). Payment processing is handled by Stripe with PCI-compliant security. Session cookies are httpOnly and signed. However, no method of transmission over the Internet is 100% secure.

8. Your Rights

Anonymous users: Your project data is stored locally—view, export, or delete it anytime by clearing localStorage or using browser developer tools.

Signed-in users: You can:

  • Delete individual projects in the app
  • Export projects to PDF
  • Request access to your stored data
  • Request deletion of your account and all associated data
  • Cancel your subscription at any time

Contact us at support@tolreport.com to exercise these rights.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13.

10. International Users

The Service is hosted on Cloudflare's global network. If you access the Service from outside the United States, your data may be processed in multiple countries. For signed-in users, project data is stored in Cloudflare's infrastructure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with an updated effective date. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

For privacy-related questions, contact us at: support@tolreport.com

← Back to TolReport