PRIVACY POLICY
Privacy Policy
Manana Tools does not collect working content. It separately processes only access and feature-use records needed to operate the service. Effective August 2, 2026.
1. Information we collect
When you visit or use a feature, we record server and browser time; the original IP address; approximate IP-derived country, region, city, ASN, and network; a visit-session identifier; landing and internal page paths; referrer domain and channel; explicitly supplied UTM campaign values; language; User-Agent-derived browser, operating system, device, and bot classification; the tool and feature action; and limited non-content statistics. Administrative actions are audit logged, while failed logins, rate limits, and blocked risky destinations are security events.
2. Working content we do not collect
Feature analytics do not store file contents, names or paths, edited text, SQL queries, REST URLs, headers, bodies or responses, queried IP addresses or returned location details, tokens, passwords, secret keys, images, or EXIF content.
3. Purpose
Records are used for security, failure analysis, abuse prevention, usage statistics, and decisions to maintain, improve, or remove features. This policy will be updated before advertising features are introduced.
4. Retention and deletion
Access and feature event logs are retained until an operator explicitly deletes them in the administration interface or the operational purpose ends. Deleted original events are not restored. Statutory retention duties take precedence where applicable.
5. Browser storage
A random visit identifier is kept in a session cookie and session storage to connect activity within one browser session. The session cookie expires when the browser session ends. Requests and recent history you explicitly save in REST Client remain only in this browser's local storage; deleting site data removes them.
6. Processors and international transfers
The service currently runs directly on rented infrastructure. IP Lookup uses a GeoLite2 database stored on the server, so the queried IP is not sent to MaxMind. If external analytics or advertising introduces a processor or international transfer, the provider, purpose, fields, and period will be disclosed here.
7. Requests and rights
Send requests to review, correct, or delete retained records to the address below. We will respond after identity verification and review of legal obligations.