Legal

Privacy policy

Last updated: November 6, 2026

We keep this short because we collect very little.

ToolsGavel is published by Bohdan Shkliarchuk (Ukraine), who decides how the data described on this page is used. Questions go to contact@toolsgavel.com.

Analytics

We use Google Analytics 4 to understand which pages help readers (page views, clicks, referrers, approximate region, device type). In the EEA, the UK and Switzerland it only uses cookies after you allow it. See Cookies and consent. We do not sell personal data.

Legal basis: in the EEA, the UK and Switzerland, your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time. Elsewhere, our interest in knowing which pages help readers (Art. 6(1)(f)); you can object at any time the same way, with Cookie settings. Google Analytics keeps this event data for no longer than 14 months.

Affiliate redirects

Links through /go/… record the click (time, the page the link was on, your country, and whether you came from one of our ads) so we can measure which content is useful. Outside the EEA, the UK and Switzerland we may also send Google Analytics an anonymous count of the click (which link, with a random ID that identifies no one), so the count survives ad blockers. Legal basis: our interest in measuring which content is useful (Art. 6(1)(f)). The vendor you land on applies its own privacy policy and may set cookies to attribute your signup.

Cookies and consent

Here is everything this site stores in your browser, and when.

Name	What it does	Kept for	Needs your OK?
tg_paid	Our own cookie, set only when you arrive from one of our paid ads. Some affiliate programs don’t allow ad traffic, so our redirector uses it to send you to the vendor’s plain site instead of a referral link. It holds the value “1” and nothing about you. Only if you allow Advertising do our pages also read it to count a vendor-link click as coming from our ad.	30 days	No for the redirect (strictly necessary); Advertising for ad measurement
tg_consent	Remembers your cookie choice (browser local storage, not a cookie).	Until you clear it; in the EEA, UK and Switzerland we ask again after 12 months	No, strictly necessary
Google Analytics 4 _ga, _ga_*	Counts visits and clicks so we know which pages are useful.	Up to 2 years	Yes: Analytics
Google Ads _gcl_au, _gcl_aw, _gcl_ls (local storage)	Tells us whether a visit from our Google ads led to a click on a vendor link.	90 days	Yes: Advertising
Microsoft Advertising (UET) _uetsid, _uetvid, _uetmsclkid (cookies and local storage)	The same measurement for our Microsoft (Bing) ads.	1 day to 13 months	Yes: Advertising
Whop pixel _wuid, _wuid_link	Measures visits and vendor-link clicks from ads we run through Whop. Not loaded at all without your OK.	Set by Whop, see Whop’s privacy policy	Yes: Advertising

If you’re in the EEA, the UK or Switzerland (or we can’t tell where you’re connecting from), analytics and advertising stay off until you choose. Everywhere else they are on by default, and you can turn them off at any time. Google and Microsoft may also set cookies on their own domains under their own policies.

We use Google Consent Mode. Until you allow a category, Google’s tags neither set nor read cookies for it. They send cookieless pings instead (a page was viewed or a link was clicked, with no identifier), which Google uses for aggregate, modelled reporting. An ad click ID in the address may be carried from page to page in the link instead of in a cookie. Microsoft’s tag follows the same Advertising setting.

To change your mind, use Cookie settings at the bottom of any page. When you switch a category off, we delete the cookies and local-storage entries this site set for it (_ga, _gcl, _uet, _wuid). Clearing this site’s data in your browser also resets your choice.

“Advertising” covers measuring whether our ads work. We don’t use it to show you ads based on your visits here (remarketing): that signal is always off.

Who receives your data

Google (Analytics, Google Ads): analytics, and advertising data if you allow it.
Microsoft (Microsoft Advertising): advertising measurement, if you allow it.
Whop, Inc. (Whop pixel): loaded only if you allow Advertising.
Cloudflare, Inc. hosts this site: it handles every request, runs our link redirector and stores the email alert list.

All four are based in the United States, so your data may be processed there. Google, Microsoft and Cloudflare take part in the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. Whop receives data only with your consent.

Email alerts

Some pages let you sign up for alerts, such as a price change on a tool you’re looking at or new deals. If you do, this is what happens.

What we keep: your email address, the alert topics you chose, the page you signed up on, when you first and last signed up, which version of this notice you saw, and some context that helps us send alerts that fit: your approximate location (country, region and city, as Cloudflare derives it from your connection) and time zone, your browser’s language, whether you’re on a phone, tablet or computer, and how you reached us (the referring site, campaign tags such as utm_source in the address you landed on, your first page on the site, and whether you came from one of our ads). Where analytics consent is required, the referring site and landing page come only from the page you sign up on unless you accepted analytics. We don’t store your IP address or your browser’s user-agent string. To stop spam signups we keep a one-way hash of your IP address and the date for up to an hour after your last attempt, then it is deleted automatically.
What we use it for: only the alerts you asked for. We don’t sell, rent or share your address, and we don’t use it for ad targeting.
Legal basis: your consent. You can withdraw it at any time.
Where it’s stored: with Cloudflare, Inc. (United States), which processes it for us under Cloudflare’s data processing addendum and the EU Standard Contractual Clauses. Before we send the first alert we’ll move the list to an email service provider and name it here.
Confirmation first: before the first alert we email you once to confirm. Nothing else is sent unless you do. Every alert has a one-click unsubscribe link.
How long: until you unsubscribe. If you don’t confirm, we delete the address 30 days after our confirmation email, and in any case 6 months after you last signed up.

Your rights

You can ask for a copy of the data we hold about you, a correction, deletion or restriction, and you can object to anything we do based on our own interests. You can withdraw consent at any time: cookies with Cookie settings, email alerts with the unsubscribe link or by writing to us. Write to contact@toolsgavel.com. You can also complain to your local data protection authority.

Contact

Data questions: contact@toolsgavel.com.