YOUR INFORMATION

Privacy notice.

Draft prepared October 7, 2026

Draft for review. Publication details and operational practices still need to be finalized.

Who operates Toadstool

Toadstool is independently operated from Nevada, United States. This draft uses the operator’s existing DBA, Drunken Dragon Designs, as the public-facing business name.

For support or privacy questions, contact support@gettoadstool.com.

What Toadstool stores

When you sign in with Google, Toadstool receives and stores your Google account identifier, email address, display name, and profile picture URL. It records account creation and sign-in times, account plan, and feed preferences. Toadstool does not receive your Google password.

The service stores the text, links, images, and files you choose to send, with associated names, titles, timestamps, file types and sizes, and source or destination device identifiers.

For paired devices, it stores device names and types, activity timestamps, and a hash of each device access token. Android devices may register a Firebase notification token. Pairing codes are stored as hashes and expire after ten minutes.

Why this information is used

Account information connects your devices to your feed. Shared content is stored so you can retrieve it from another device. Device records support pairing, access control, and notifications. Storage records enforce file size, quota, and expiry limits.

Cookies and local storage

The web application uses a session cookie to keep you signed in, normally for up to 30 days. It remembers your current tab in browser session storage. Google sign-in may set cookies for authentication. The extension stores its server address and device credential in extension storage; the Android app stores its pairing credentials on the device.

Toadstool does not use advertising networks or visitor analytics services.

Other services involved

Google provides sign-in. Firebase Cloud Messaging delivers Android notifications when configured. Notification payloads can include an item identifier, type, title, filename, and creation time; the device fetches the full content through the authenticated API.

Link previews cause the server to request a shared URL from the linked website. Preview images may be loaded by your browser directly from the image provider, which can receive your IP address and normal request information. Google’s handling of information is described in its Privacy Policy.

Storage and access

Toadstool’s account records and shared content are hosted in the United States.

Account and item records are stored in the service database; uploaded files are stored on the server. Access through Toadstool requires your signed-in account or a paired device credential. Content is not end-to-end encrypted: the service operator and infrastructure administrators may be able to access stored content.

Retention and your controls

Free-account files expire seven days after upload. Paid-status files currently have no scheduled expiry while that status remains active. Text and link records have no automatic expiry in the current service. You can delete shared items and files and revoke devices in the web application. Removing a device does not erase content already downloaded to it.

There is currently no self-service account deletion screen. For privacy questions or account deletion requests, contact support@gettoadstool.com.

Details pending confirmation

The final operator identification for public launch, backup and infrastructure log retention, and account deletion handling must be confirmed before this notice is finalized.