Last updated: 5 September 2026
This page explains what Toolana Store does with your information when you browse the store, buy a paid digital product, download a free digital product, or contact us. It covers only the processing the store actually needs.
What we process
We collect only what a purchase or a download needs. The store has no customer accounts, and we do not build advertising profiles.
- Paid order information: your email address, the product you bought, the amount and currency, and the payment provider's transaction reference.
- Paid delivery information: the secure download access issued for a paid order, including its expiry, its download limit, and how many downloads have been used.
- Free downloads: only the minimal technical and security information needed to confirm that the product and file are available, to issue a secure short-lived download, and to prevent abuse.
- Support messages: the name, email address, subject, and message you send through the contact page.
- Technical information: request data such as an IP address and timestamps, used to apply rate limits and to detect abuse.
Why we process it
We use the information above for these purposes only:
- For paid products, to complete your order and confirm that payment succeeded.
- To deliver files securely — after a confirmed paid order, or as a free download — and to keep access working within its stated limits.
- To answer support requests and, for paid orders, to reissue a download link when that is needed.
- To detect and prevent fraud, abuse of downloads, and attacks on the store.
- For paid orders, to keep the records we may need for accounting and for handling a payment dispute.
Payments and service providers
Running the store requires a small number of external providers. We share information with them only to the extent needed to provide the service. We do not sell your information, and we do not share it for unrelated marketing.
- Paddle processes payments and acts as the merchant of record for paid purchases. Checkout takes place with Paddle, which handles your payment details and the billing information needed to complete and support the transaction. Your card number is entered with Paddle and is never sent to or stored by this store. Paddle is not used for free downloads. Paddle's own privacy terms apply to that payment processing.
- Resend delivers transactional email, such as a paid order and download message. It processes the recipient address and the message content needed to send it. Downloading a free product does not by itself send that email.
- Cloudflare R2 stores the product files. Files are held in private storage and are served only through authorized, limited or temporary download access.
- Our hosting provider runs the store's servers and keeps operational server logs.
Other disclosure
These providers may process information in countries other than your own, and each publishes its own privacy terms for that processing.
We may also disclose information where we are required to do so by law, or where it is necessary to protect the store, its customers, or a third party from harm or fraud.
Cookies
The store sets only functional cookies. There are no advertising or analytics cookies, and no third-party tracking scripts are loaded.
- A language cookie, so the store remembers whether you chose Arabic or English.
- A theme cookie, so the store remembers your light or dark preference.
- An administrator session cookie, which applies only to store staff signing in to the admin area.
How long we keep it
Paid order records and paid download access are kept while they are needed to support your purchase and to meet record-keeping obligations that may apply to the sale.
Support messages are kept while your request is open and for a reasonable period afterwards. Technical security records, including those used for free downloads, are kept for a short period only.
Your choices
You can ask what information we hold about a paid order or a support message, ask us to correct it, or ask us to delete information we are not required to keep. Use the contact page and tell us which order or request your enquiry relates to, so that we can find it and confirm it is yours.
Where data-protection law gives you rights beyond what this page describes, those rights continue to apply.
Changes to this page
If this policy changes, the revised version is published here with a new date at the top.