Privacy Policy — Webstarted Tools

The short version. We don’t sell your data and we don’t require an account. This website uses Google Analytics to understand traffic. Our desktop tools run locally on your device — your files and content are not sent to us — but some features do make network requests, to third parties and to a few endpoints we run ourselves. Those are listed below.

1. Who we are

This site and the tools listed on it are operated by Webstarted LLC (“Webstarted”, “we”, “us”), a limited liability company organized in the State of Florida, United States of America, based in Coral Springs, Florida. For any privacy question, contact us at apps-support@webstarted.com.

2. Scope

This policy covers tools.webstarted.com (the “Website”) and the downloadable Webstarted tools such as Toolbox, Screen Capture, and Anonimizar (the “Tools”). Some Tools have their own terms with tool-specific privacy details; where they differ, the tool-specific terms control for that Tool.

3. Information we collect

On the Website

Analytics. We use Google Analytics 4 to measure traffic (pages viewed, approximate location, device and browser type, referring site). Google processes your IP address to estimate location; we do not use it to identify you. Analytics runs only on the production site.
Server logs. Our hosting provider (Microsoft Azure Static Web Apps) keeps standard access logs — including IP address and request metadata — to serve the site and guard against abuse.
Downloads. Installers are served from GitHub Releases. When you download a Tool, GitHub receives the request (including your IP) under its own privacy policy.
Email. If you email us, we receive your address and whatever you include, and use it only to reply.

The Website has no sign-up, no forms, and no advertising trackers of our own.

In the Tools

The desktop Tools are local-first: your documents, screenshots, notes, and settings are processed on your own device and are not transmitted to Webstarted. That is the promise we can keep — it is not the same as saying nothing ever leaves your device. Some Tools offer optional features you turn on yourself in which part of that data does leave it, though never towards us: syncing your settings through your own Apple iCloud account, for instance, copies them to Apple’s servers under your account. See each Tool’s terms for the specifics.

That is separate from the network requests some features need in order to work, described below. Any network request necessarily carries your IP address and the technical metadata of a connection (approximate time, requested address, and what your operating system and network reveal about the connection itself).

Some widgets query third-party services to work (for example, weather forecasts, exchange rates, market prices, news feeds, translation services, or your public IP address). Those queries — only what the feature needs — and your IP address go directly from your device to the provider, under its own privacy policy. Optional AI features connect to an endpoint you configure: a model running locally on your device, or a remote provider under your own account — in that case, what you type goes to the provider you chose.

Endpoints operated by Webstarted (Toolbox)

Some Toolbox features talk to endpoints we run ourselves. The list below is current as of the date at the top of this page; the widgets available in Toolbox and the services they use can change between versions and catalog updates, and we update this page when they do.

Public IP lookup — a2player.com/api/ip. The default provider for the My IP widget. Because it is a network request, it receives your public IP address; the response is built from what Cloudflare has already computed for the connection — approximate city, region and postal code, country and continent, time zone, approximate coordinates, network operator (ASN and organization), the Cloudflare datacenter that answered, and the HTTP and TLS version. We use it only to answer that request. The endpoint keeps no application-level logs: it responds and retains nothing, has no database and stores no state, and its responses are marked as non-cacheable. Cloudflare, as our infrastructure provider, may retain its own request logs under its policy. If our endpoint does not respond, the widget can fall back to the third-party services ipwho.is and ipify.org, each under its own privacy policy; you can also pick a provider yourself in the widget’s settings, which pins it.
Widget catalog and downloads — apps.webstarted.com. Toolbox fetches the catalog of available widgets and downloads widget packages from this address. It is hosted on Microsoft Azure Static Web Apps, which keeps standard access logs — including IP address and request metadata — to serve the files and guard against abuse. We do not add analytics to these requests.
Update checks — GitHub Releases. Toolbox checks for new versions against our release files hosted on GitHub, which receives the request (including your IP) under its own privacy policy.
Video playback — a2player.com/embed. The Media widget plays video by loading this page of ours inside the app. That page uses Google Analytics 4, which means that when you play a video, Google and our analytics account receive the event together with the identifier of the video being loaded, an indication that the request came from Toolbox, and the data Google Analytics collects by default (including your IP address, which Google processes to estimate location, and an identifier stored by the page to distinguish visits). This is measurement, not something the playback feature needs. If you do not want it, you can disable the Media widget in Toolbox’s settings.

Third-party services used by widgets

Several widgets fetch data directly from services we do not operate. Those requests leave your device and reach the provider, so the provider sees your IP address and whatever the request contains; each one is governed by its own privacy policy, not by ours. We do not receive any of this data. The list below is current as of the date at the top of this page and covers the widgets published in our catalog; a widget only makes these requests while it is installed and enabled.

Weather — open-meteo.com: the location you look up (a place name, or coordinates) is sent to fetch the forecast.
Crypto prices — coingecko.com: the coins you track.
Stocks — query1.finance.yahoo.com by default, or finnhub.io if you enter your own API key: the tickers you track. Your Finnhub key is stored in your operating system’s keychain and is sent only to Finnhub.
Currency converter — open.er-api.com and dolarapi.com (including its country subdomains, e.g. ve./bo.): exchange rates. No data about you is sent.
Network fees — mempool.space (Bitcoin), and ethereum-rpc.publicnode.com or 1rpc.io (Ethereum): public network fee levels. No data about you is sent.
Translator — api.mymemory.translated.net by default, or api-free.deepl.com if you enter your own API key. 🚩 The text you translate is sent to that provider. Your DeepL key is stored in your operating system’s keychain and is sent only to DeepL.
My IP — besides our own endpoint described above, ipwho.is and api.ipify.org / api6.ipify.org as fallbacks or when you pin one of them: the request itself reveals your public IP address.
Media — youtube.com (thumbnails from i.ytimg.com) and player.vimeo.com: the video you open is loaded from, and played by, the provider’s own embedded player, which applies its own policy and may set its own cookies.

4. How we use information

To operate, secure, and improve the Website and the Tools.
To understand which pages and Tools are useful, in aggregate.
To respond to messages you send us.

We do not sell or rent personal data, and we do not use it for third-party advertising.

5. Cookies and analytics

The Website uses cookies set by Google Analytics to distinguish visitors and measure usage. You can block or delete cookies in your browser, or install Google’s Analytics Opt-out add-on. Blocking analytics does not affect your ability to use the site or the Tools.

6. Who we share with

We rely on a few service providers that process data on our behalf:

Google (Analytics) — usage measurement on the Website and on the a2player.com/embed video page used by Toolbox’s Media widget.
Microsoft Azure (Static Web Apps) — hosting and access logs for the Website and for the Toolbox widget catalog.
Cloudflare — infrastructure for a2player.com, including the public IP lookup endpoint used by Toolbox.
GitHub — hosting the Tool installers you download and the release files Toolbox checks for updates.

We may also disclose information if required by law. We do not otherwise share your data with third parties.

7. Data retention

We retain usage data in Google Analytics for 14 months, after which Google deletes it automatically. Server access logs are kept by our host for a short period (typically up to 90 days) for security and troubleshooting. Emails are kept only as long as needed to handle your request. Data the Tools keep on your device stays under your control and can be deleted by you at any time.

8. Your rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have the right to access, correct, delete, or port your personal data, to object to or restrict its processing, and to opt out of its “sale” or “sharing” — which we do not do. We do not use your data for automated decisions that produce legal effects, and we will not discriminate against you for exercising any of these rights.

To make a request, email apps-support@webstarted.com; we respond within the period required by applicable law (for example, 30 days under the GDPR or 45 days under the CCPA). Because the Tools keep data on your device, you can also delete it there directly. If you are in the EU/UK, you also have the right to lodge a complaint with your local data-protection authority.

9. International users

Webstarted is based in the United States, and information handled by our providers may be processed there or in other countries. Where required, we rely on our providers’ safeguards for such transfers.

10. Children

The Website and Tools are not directed to children under 13, and we do not knowingly collect their personal data.

11. Security

We take reasonable measures to protect information, but no method of transmission or storage is completely secure.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new effective date at the top of this page.

13. Governing law

This policy is governed by the laws of the State of Florida, United States of America, without prejudice to any non-waivable rights you may hold under the data-protection laws of your place of residence.

14. Contact

Questions about this policy? Write to Webstarted LLC at apps-support@webstarted.com.