Privacy Policy

Things you give me

I only get this when you choose to share it, such as when you:

• Subscribe to a newsletter (your email address)
• Send me a message through my contact form or by email
• Book a call through Cal.com
• Comment on my blog through Giscus (which uses your GitHub account, so your GitHub username and avatar show next to your comment)
• Sign in to or use one of my apps, tools, or demo projects that needs an account

Things collected automatically

I use Umami, a privacy-friendly, cookieless analytics tool, to see roughly how my sites are used. It sets no cookies, doesn't store your IP address, and doesn't follow you around the web. It only records anonymous, aggregate things like which pages get visited, where visits come from, and general browser, device, and country information. I also use Google Search Console to see how my pages show up in Google Search — it doesn't add any tracking to your visit.

I use what I collect to:

• Run, maintain, and improve my sites and the things I make
• Send you the newsletters you signed up for
• Reply to your messages and requests
• Deliver whatever you asked for (a booking, a download, a purchase)
• Keep everything working fairly and securely

I don't sell your information, and I don't use it to build a profile of you. I only handle it where I have a good reason to — because you asked me to (like sending a newsletter or replying to you), because you agreed to it, or because it's needed to keep my sites running and secure.

I keep cookies to a minimum. My analytics are cookieless, so I don't set tracking cookies. What my sites do use is:

• Small bits of storage needed for basic functionality
• A record of your preferences (like light or dark mode), kept in your browser

Some tools and apps also save data in your browser to work — more on that in the next section. You can clear this any time in your browser settings, though some features may stop working if you do.

tools.timonwa.com is a free, open-source collection of small tools. There's no account, and different tools work differently.

Tools that run in your browser

Simple tools — like the word counter, case converter, slug generator, and reading-time estimator — run entirely on your device. What you type stays in your browser and never reaches me.

AI tools

AI tools (like Article to Social Posts and Article to SEO Meta) send the text or link you provide through my server to Google's Gemini so it can generate a result for that request. I don't keep a database, and I don't store or log what you send — it's used for that one request and then it's gone. Content from a link you submit may sit in a short-lived cache (about an hour) so a repeat run on the same link is faster. Your input is handled by Google under Google's Gemini API terms and Privacy Policy. If you'd rather Google not process your text, don't use the AI tools — or use your own key (below).

Using your own key

You can add your own Google (Gemini) key. It's kept only in your browser and cleared when you close the tab. When you run a tool, the key travels with that request so the call to Google can be made on your behalf — it's used once and never stored or logged.

What stays on your device

Your history, preferences, and saved templates live only in your browser. They're never sent to me, and you can clear them any time.

Keeping the free tier fair

So no one person can use up the free allowance, I count requests using a scrambled, one-way version of your IP address plus a daily tally — I never store your actual IP, and it can't be traced back to you. The count resets each day, and requests made with your own key skip it entirely.

A few of my apps, tools, and demo projects need you to sign in to work. When one does:

• I store what's needed for the app to run, and I clear that data periodically
• Your email may be added to my mailing list. You can unsubscribe at any time using the link in any email

My sites rely on trusted third parties, each with its own privacy policy. Anything you do on their platforms (like paying) is covered by their terms, not mine. The main ones:

• GitHub (blog comments via Giscus, and my open-source projects) — privacy
• Substack and Sender (newsletters and mailing list) — Substack privacy, Sender privacy
• Cal.com (booking calls) — privacy
• Buy Me a Coffee, Selar, GitHub Sponsors, and Paystack (support and purchases — payments happen on their platforms, not on my site) — BMC privacy, Selar privacy, Paystack privacy
• Google (Gemini for the AI tools, and Search Console) — privacy
• Umami (cookieless analytics), Upstash (the daily counter for the tools), and Vercel (hosting)

Because I have a global audience and these providers operate internationally, your information may be processed on servers in other countries — such as the United States or countries in the EU — which may have different data protection laws than your own. Wherever it's handled, it stays covered by this policy.

I may also share information when the law requires it, to protect my rights, or with your consent.

I take reasonable steps to keep your information safe, and I keep it only as long as I need it — to provide what you asked for, meet legal obligations, and run my sites. When it's no longer needed, I delete or anonymize it. That said, no method of storing or sending data online is ever completely secure, so I can't promise absolute security.

Wherever you are in the world, you can:

• Unsubscribe from my newsletters using the link in any email
• Ask what personal information I hold about you, and ask me to correct or delete it
• Ask me to restrict or stop certain uses of your information, or to send you a copy of it
• Withdraw any consent you've given, at any time
• Clear the data my tools and apps store in your browser

Depending on where you live, these rights may come from laws like the GDPR (Europe and the UK), the NDPR (Nigeria), or similar — and I'll honour any valid request whatever your location. If your region has a data protection authority and you're unhappy with how I've handled your information, you can complain to them, though I'd appreciate the chance to put things right first.

To make a request, just contact me using the details below.

My sites aren't intended for children under 13 — or the minimum age in your country, where that's higher — and I don't knowingly collect their information. If you believe a child has shared personal information with me, please reach out and I'll remove it.

I may update this policy from time to time. When I do, I'll change the "Last Updated" date above. Please check back now and then.

Questions about this policy or your information? I'm happy to help: