Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains what personal data is processed when you use lztoolbox.com (“LZ Tool Box”, “we”, “us”), why, and what rights you have. This website is operated from Sri Lanka. The policy is written to meet the requirements of Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (PDPA), as amended, and, because visitors come from all over the world, the EU and UK General Data Protection Regulation (GDPR), US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), and similar laws elsewhere.

1. Who is responsible

The controller responsible for data processing on this website is:
Pasindu Senavirathna
“Ajantha”, Wapallage Watta
Pilana, Wanchawela
Galle
Sri Lanka
Email: [email protected]

2. Summary

• The tools run in your browser. What you type, and audio or video from your camera or microphone, is not sent to us.
• We do not ask you to create an account and we do not collect your name or email unless you write to us.
• We show ads through Google AdSense and may use Google Analytics. These services use cookies and similar technologies. Where the law requires it, they are only used after you give consent.

3. Data you enter into the tools

Values you type into calculators, keys you press in the keyboard tester, and audio or video from your microphone or webcam are processed locally on your device. They are not transmitted to or stored on our server. Recordings and snapshots made in the microphone or webcam test exist only in your browser until you close the page or download them. Your browser asks for permission before any page can use your camera or microphone, and you can withdraw that permission at any time in your browser settings.

4. Hosting and server logs

When you visit the site, your browser automatically sends technical information to the server of our hosting provider: IP address, date and time, the page requested, referrer, browser type and operating system. This is needed to deliver the website and keep it secure.

Legal basis: our legitimate interest in operating a secure and working website (PDPA; Art. 6(1)(f) GDPR). Retention: log files are deleted automatically by the hosting provider, usually within 30 days, unless needed to investigate a security incident. Our hosting provider and any content delivery network we use process this data on our behalf.

5. Information stored in your browser

We use your browser's local storage for features you use on the site: your light or dark mode choice, best scores in games, and your recently used tools. This information stays on your device, is never sent to us, and can be deleted at any time by clearing your browser's site data. It is used only to provide features you asked for.

6. Cookies, advertising and analytics

Google AdSense. We show ads using Google AdSense, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for users in the EEA, UK and Switzerland, and by Google LLC (USA) elsewhere. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. Ads may be personalized or non-personalized depending on your choices.

Google Analytics (if enabled). We may use Google Analytics to understand how visitors use the site, for example which pages are visited and for how long. IP addresses are not logged or stored by Google Analytics 4. Data is retained for a maximum of 14 months.

Consent. Visitors from the EEA, the UK and Switzerland are shown a consent message from a Google-certified consent management platform before advertising and analytics cookies are used. Until you choose, Google services run in a restricted mode without advertising or analytics cookies. You can change or withdraw your consent at any time with the Cookie settings link in the footer.

Legal basis: your consent (PDPA; Art. 6(1)(a) GDPR) where consent is required; otherwise our legitimate interest in funding the site through advertising (Art. 6(1)(f) GDPR).

You can opt out of personalized advertising at Google Ads Settings or www.aboutads.info. For more information, see how Google uses information from sites that use its services.

7. When you contact us

If you email us, we process your email address and message to reply to you. Legal basis: our legitimate interest in answering your request (Art. 6(1)(f) GDPR). We delete the correspondence once it is no longer needed, usually within 12 months, unless we must keep it for legal reasons.

8. International transfers

Google may process data in the United States and other countries. For transfers from the EEA, UK and Switzerland, Google relies on the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses. This website is operated from Sri Lanka. Where the PDPA applies, personal data is only transferred outside Sri Lanka to providers that protect it adequately, such as Google under its published privacy terms.

9. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy;
• have incorrect data corrected and have your data deleted;
• restrict or object to processing, including processing based on legitimate interests;
• data portability;
• withdraw consent at any time, without affecting processing that happened before;
• ask for a review of decisions made only by automated means;
• lodge a complaint with a data protection authority: in Sri Lanka, the Data Protection Authority of Sri Lanka; in the EEA or UK, the supervisory authority in the country where you live or work.

Because the tools do not send your inputs to us, in most cases we hold no personal data about you at all. Data collected by Google for advertising and analytics is controlled through your cookie settings and your Google account. To make a request, email [email protected]. We respond within the time required by the law that applies to you, for example within one month under the GDPR or 45 days under US state laws.

10. Notice for US residents (California and other states)

In the past 12 months we have collected the following categories of personal information through the advertising and analytics services described above: identifiers (such as IP address and cookie IDs) and internet activity (such as pages viewed and interactions with ads). We do not sell personal information for money. However, allowing Google to use cookies for personalized advertising may count as “selling” or “sharing” personal information for cross-context behavioral advertising under California and some other US state laws.

Your choices: you can opt out of the sale or sharing of your personal information with the Your privacy choices link in the footer, through a Global Privacy Control (GPC) signal from your browser, or by emailing us. You also have the right to know, delete and correct your personal information, and you will not be treated differently for using your rights. We do not knowingly sell or share the personal information of consumers under 16.

11. Children

This website is intended for a general audience and is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.

12. Security

The website is served over an encrypted HTTPS connection. Because the tools work in your browser and we do not run user accounts or databases, very little data reaches us in the first place.

13. Changes to this policy

We may update this policy when the website or the law changes. The “last updated” date at the top shows when it was last changed.

14. Contact

Questions about this policy or your data: [email protected], or write to Pasindu Senavirathna, “Ajantha”, Wapallage Watta, Pilana, Wanchawela, Galle, Sri Lanka.