Privacy

ToyTool Firmware for SmallTV-Ultra: your ToyTool account at toytool.work, the firmware on your screen, the Chrome extension “ToyTool Firmware — local control” and the Claude Code helper. Updated 15 October 2026.

In short

• We keep what the service needs to work: your email, your screens and their settings. Nothing is sold and there are no ads.
• We count visits ourselves, on our own server: which pages are opened, where visitors come from, what they click, how a purchase goes. No Google Analytics, no Yandex Metrica, no pixels — nothing goes to third parties. Details below, under “Visits and statistics”.
• Your Wi‑Fi password stays on your screen. It is never sent to us.
• The extension and the Claude Code helper talk to your screens inside your home network. They send nothing to us or to anyone else.

Your account

• Email, an optional name, the site language, your licenses and orders. Sign-in is by a one-time code or link sent to your email; codes are stored only as hashes and expire in minutes, sign-in sessions are a cookie on toytool.work.
• Cookies: the sign-in session (__Secure-stv; older sessions stv), a “signed in on this browser” hint without any data (stv_in) so public pages know whether to show your account, a hint that the account owns the firmware (stv_own) so the product page opens your account instead of the sales page, and your language (lang). No advertising or tracking cookies — the statistics below use none.
• Payments are handled by Whop. We never see card details; Whop tells us the order was paid (email, plan, amount).
• Connectors you add — a YouTube API key and channels, a Notion token and task database — are kept with your account and sent, encrypted, only to your own screens, which use them to fetch your data.
• Letters: sign-in codes, purchase confirmations, gift invitations. Nothing else.
• Your own faces and GIFs: faces you make in the studio and GIFs you upload are kept with your account, privately — there is no public page or link to them; only you, in your account, and your own screens get them. For a GIF we keep the file you uploaded (so it can be converted again: to show the whole picture instead of filling the screen, or to fit a screen with less free memory), the animation made from it for the screen, a still preview and the face around it. Deleting a GIF face (Faces → Mine → ⋯ → Delete) deletes all of these from our server at once and removes the face from your screens.

Visits and statistics

• What we record when you use toytool.work: the pages you open and their titles; where you came from — only the referring site’s domain and the campaign tags of the link (utm_…); how long a page was actually visible and how far down you scrolled; clicks on the site’s buttons and on links to other sites; the steps of signing in and buying (“asked for a code”, “chose a plan”, “pressed Pay”, “paid”) — never what you type; actions in your account (“added a face to a screen”, which kinds of settings changed — not their values, never tokens or keys); errors in our pages’ scripts; how fast each page loaded and responded to you (the browser’s own speed measurements, kept with the page’s address only — not with your visit or account). From your browser’s request: the browser, system and kind of device, the browser’s language, the window size range and the colour scheme.
• Your country is worked out on our server from your IP address with an offline database — IP Geolocation by DB-IP (CC BY 4.0). The address isn’t sent anywhere for that.
• IP addresses are kept only shortened: the last part is dropped (203.0.113.0; for IPv6, the first 48 bits). That points to a network, not to a device.
• Not signed in: no tracking cookie and nothing that stays in your browser. A random id for the current visit lives in this tab’s sessionStorage and is gone when the tab closes or after 30 minutes without activity. To count unique visitors per day we use a hash of a random daily value, the shortened address and the browser’s user agent; the daily value is replaced every day and deleted the day after, so visits on different days can’t be tied together.
• Signed in: your visits and actions are recorded with your account, and what you did in the same visit just before signing in or paying is added to it. The server also records with your account: sign-up and sign-ins, checkouts, payments and refunds, gifts, and your screens being linked, unlinked or updated.
• Robots: our web server keeps a short log of requests for the public pages (address, answer, referring domain, user agent, the shortened IP — never the account pages’ contents, the API or your screens’ traffic). It lets us count search engines, link previews, AI crawlers and vulnerability scanners separately from people. The log is read into the statistics within a minute and rotated away by size.
• Why: to see which pages and links help people, find where sign-in or checkout goes wrong, fix errors, and tell people from robots.
• How long: detailed records 13 months; after that only daily totals with nothing about any one person. Everything stays in our own database on our server (and in its encrypted backups); only the site’s administrator sees it.

Your screen (the firmware)

• Talks to toytool.work with a random id and a key made on the screen; every message is signed. It sends: firmware version, which faces are installed and what is on the screen, its settings (without the Wi‑Fi password; secrets masked), Wi‑Fi signal level and connection timing (to explain slow commands), how much of its memory is free (so a GIF face is made to fit it), and its local network address only if “Local network address” is on in the screen’s privacy settings. Our server also sees the public IP address it connects from.
• Fetches its data directly from the services you use. Each request carries only what is looked up — nothing about you, your account or the screen’s id; like any website, the service sees the public IP address the screen connects from:
  • Weather: Open‑Meteo, with the coordinates of the city you picked.
  • Currency rates: ExchangeRate-API’s open feed (open.er-api.com, the day’s rates against the US dollar, at most once an hour) — Rates By Exchange Rate API. The first pair’s chart: the Bank of Russia (cbr.ru) for pairs with the rouble, Yahoo Finance for the rest, each asked for that pair’s last month.
  • Crypto: CoinGecko’s public API, with the coins of your pairs and their currency — Data provided by CoinGecko.
  • YouTube: the YouTube Data API with your own API key and channels, and the pictures (avatars, thumbnails) from YouTube.
  • Tasks: the Notion API with your own token and task database.
• Its own page in your home network has no password: anyone on your Wi‑Fi can open it, like most home devices.

The Chrome extension “ToyTool Firmware — local control”

• Reads the list of your screens from your toytool.work account in your browser, then sends your commands (show a face, brightness, install or remove a face, update the firmware) straight to those screens in your home network, so they apply instantly.
• It only works with your ToyTool account at toytool.work and with local network addresses of screens, and only with the screen’s own control endpoints. It does not read other sites, does not collect browsing data, and sends nothing to third parties.
• It keeps your screens’ names and local addresses in Chrome’s storage on your computer. Remove the extension and it’s gone.

The Claude Code helper

• A script you run on your own computer. It reads your Claude Code sign-in there, asks Anthropic for your plan limits, counts tokens from Claude Code’s local logs and sends the numbers to your screen in your home network. Nothing from it goes to ToyTool.

Keeping and deleting

• Account data is kept while you have an account. Ask us and we delete your account, your screens’ records, connectors, your own faces and GIFs, and the statistics recorded with your account. Unlinking a screen drops its link to your account right away.
• A face or GIF you delete is gone from the server at once; copies in the server’s encrypted backups disappear as those backups are replaced, within two months.
• Contact: Telegram.