Privacy

The short version: we collect as little as we possibly can, and we cannot read your list.

Last updated 8 November 2026

What we collect

If you use Tolabook without signing in, we collect nothing about you. Your list stays in your browser.

If you turn on backup, we store a one-way code made from your Google ID, a sign-in record, your sealed box and the time it was last saved. The full list is here.

What we do not collect

We do not collect your name, email address, phone number, home address, bank details, Aadhaar, PAN or photos. We have no way of reading what is inside your sealed box.

Cookies

One, and only if you sign in. It keeps you signed in. A second short-lived cookie protects the sign-in step and is removed when it finishes. We use no advertising or analytics cookies.

Who else is involved

• Cloudflare hosts this site and stores the sealed box. Like any host, it processes your IP address to deliver pages.
• Google handles sign-in, only if you choose to use it.

We use short-lived scrambled codes of IP addresses to stop abuse of sign-in, and they are not used for anything else. We do not sell or share data with anyone else.

Your choices

Download your list, or delete your account and sealed box, at any time from inside your locker. Deleting takes effect immediately. Clearing your browser's site data erases the copy on your device.

What this is not

Tolabook keeps a record. It is not a bank, an insurer, a valuer or a financial adviser, and rates shown are estimates.