Privacy

Last updated 6 November 2026

IDG Toolbox needs no account, and we never ask for your name or email address. This is what the tools do keep, where it is stored and for how long.

When you vote

Your phone sends the skills you chose. They are stored in the session with the time and a random number your browser made up, so that sending again replaces your vote instead of adding another. Your browser uses the same number in every vote it takes part in. The facilitator sees only totals, never names or numbers. In a very small group, totals can still show who chose what.

When you contemplate

• Your notes stay on your phone. They are never sent to us.
• A word you share is stored in the session with the time and a random number like the one above. It shows on the screen in the room without your name. It is deleted when the facilitator removes it or chooses another skill, and at the latest with the session.
• On your own, neither the skill you choose nor what you write is sent.

When you run a session

The session stores the title and question you wrote, its language and its settings. Please keep people’s names out of titles, questions and shared words. The title is also on our usage page until the session is deleted.

The timer and the landing page

The timer runs only in your browser: it sends nothing and saves nothing. The landing page saves only the language you chose, in your browser.

How long

• A vote is deleted, with everything in it, 30 days after voting last closed, or 30 days after it started if voting never closed.
• A contemplation session is deleted, with everything in it, 30 days after the facilitator last changed anything.
• After any deletion, Cloudflare’s own recovery copies can hold the data for up to 30 days more.

What we count

For each session we count what happens: that it started, that a vote came in, that results were shown, that a timer started, that a word was shared, and which skill the facilitator held up. Each count has the time, the tool, the session’s code and language, and sometimes the view on the screen. It never holds which skills anyone voted for, a shared word or the random number. We use the counts to see whether the tools are used and in which languages, and we keep them with no end date.

In your browser

The tools set no cookies. They keep what they need in your browser’s own storage: your language, the random number, a session’s key and title, what you chose, your screen settings and your notes. It stays there until you empty a note or clear the site’s data in your browser, so on a shared computer, clear it when you are done. There are no ads or trackers, and no scripts or fonts loaded from anywhere else.

Where it is stored

Sessions and counts are stored in the EU with Cloudflare, which hosts the tools and handles this data on our behalf. Cloudflare is a US company. Our agreement with it covers transfers out of the EU through the EU–US Data Privacy Framework, with the EU’s standard contractual clauses as a fallback. Your connection runs through Cloudflare’s worldwide network, usually a data centre near you, which can be outside the EU.

Cloudflare sees your IP address, as any host would. The tools use it to limit how many requests one connection can send, and don’t save it. We share none of this with anyone else, and we sell nothing.

Who is responsible

We Remagine One AB (company registration 559316-0228), Karlstad, Sweden, is the data controller. Write to we@remagine.one.

We handle this data on the basis of our legitimate interest in running the tools you choose to use, and in knowing whether they are used (GDPR Article 6(1)(f)).

Your rights

Under the GDPR you have rights of access, correction and erasure, and the right to object. Nothing here has your name on it, so we can’t find your data from your name or email address: we would need the session’s code and the random number in your browser. Everything in a session goes by the times above, and a facilitator can clear votes or remove a word sooner. If a title, a question or a shared word names you, write to us with the session’s code. You can also complain to the Swedish Authority for Privacy Protection (IMY).