Login Sign Up
📻 Play Live All-India & Global FM Radio Online — 500+ Stations Free
Full View →
Privacy & Data Governance

Privacy Policy

How ToolNPlay collects, processes, and protects your information across our AI tools, online games, FM radio, software, and browser extensions.

Effective Date: October 2026 • Version 3.2

1. Scope & Acceptance

ToolNPlay ("we", "us", "our") operates the web ecosystem accessible via toolnplay.com, including all associated subdomains, tools, games, software, and browser extensions. By visiting our site or utilizing our services, you acknowledge and agree to the data collection and handling procedures detailed in this Privacy Policy.

If you do not agree with any aspect of this Policy, you must refrain from accessing ToolNPlay services or submitting personal information.

2. Information We Collect

We gather information in three distinct categories:

A. Account Information (Voluntarily Provided)

When you register, we collect your chosen username, email address, password hash (encrypted using Bcrypt), and optional profile details. If you activate Two-Factor Authentication, a Base32 secret key is stored.

B. Usage & Telemetry Data

When you navigate our site, our servers collect standard request headers, including IP address, browser user-agent, operating system, referring URL, and page interaction timestamps for security logging and DDoS mitigation.

C. Direct Messages & Inquiries

Messages submitted through our contact forms or dashboard direct messaging system are stored in our secure database to facilitate administrative support and customer service responses.

3. AI Tools & API Key Security (Bring Your Own Key)

ToolNPlay provides 70+ generative AI tools powered by modern LLMs, including Google Gemini (Gemini 2.5 Flash, 2.5 Pro, 2.0 Flash), OpenAI (GPT-4o), Claude, and DeepSeek.

  • Encryption at Rest: Any API keys you save in your personal dashboard are encrypted using strong AES-256-CBC cryptography before database insertion.
  • In-Memory Decryption: Your custom API key is only decrypted in server memory for the exact duration of the external API request.
  • No Model Training: ToolNPlay does not use your submitted prompts, articles, or transcripts to train AI models.

4. Live FM Radio & Audio Streaming

Our FM Radio player connects directly to live community streams provided via public directories (such as the Radio-Browser community API).

ToolNPlay does not host, mirror, record, or cache radio broadcasts on our servers. When you stream a station, your browser establishes a direct HTTP/HTTPS connection with the respective broadcaster’s streaming server.

5. Software Downloads & Browser Extensions

We develop and distribute native desktop utilities (such as ToolNAmp Retro Player) and browser add-ons (including Screen OCR and Meeting Audio Recorder).

Zero Spyware Policy: Our desktop software and extensions do not contain bundled adware, cryptominers, or telemetry trackers.

Local Processing: Tools such as Screen OCR perform character recognition locally in your browser/device runtime without transmitting your captured screen images to our servers.

6. Web Games & Cloudflare Services

Our games library features HTML5 canvas games and dedicated Cloudflare subdomain deployments (such as ludo.toolnplay.com).

Game high scores and current session states are saved locally in your browser's localStorage. No personal identification is required to play free games.

7. Cookies, LocalStorage & Advertising

ToolNPlay uses cookies and browser local storage for essential session functionality:

  • Theme Preferences: Stored via localStorage.tnp_theme to preserve your night/day mode selection.
  • Session Management: Standard secure HTTP-only cookies maintain your authenticated login state.
  • Advertising & Analytics: We partner with Google AdSense to serve non-intrusive contextual ads. Third-party vendors, including Google, use cookies to serve ads based on prior visits. You may opt out of personalized advertising by visiting Google Ad Settings (google.com/settings/ads).

8. Account Security & Two-Factor Authentication (TOTP)

We employ multi-layer security protections to guard your user account, including Bcrypt password hashing, rate-limiting brute-force defenses, session expiration controls, and optional RFC 6238 Time-based One-Time Password (TOTP) 2FA compatible with Google Authenticator and Authy.

9. GDPR, CCPA & Your Legal Rights

Depending on your country or region of residence (including the European Union and California), you possess specific rights regarding your personal information:

  • The right to request access to the personal data we hold about you.
  • The right to rectify inaccurate or incomplete records.
  • The right to request complete erasure of your account and personal history ("Right to be Forgotten").
  • The right to restrict or object to certain processing activities.

10. Contacting Us

If you have questions, privacy requests, or wish to exercise data rights, please contact our Data Governance Team: