Privacy Policy

Effective November 3, 2026

pik (the "service", at pik.tooly.fyi) lets you show a QR code on a computer, scan it with a phone, and send that computer's browser to a web address. It is operated by itpro360 LLC ("we", "us"). This policy explains exactly what the service collects, why, and for how long. Using pik never needs an account: it asks visitors for no names, emails or other profile details. Only the people who run pik sign in, to its admin console (see section 2 below).

1. What we collect and why

What	Why	Kept for
Screen and phone connections: a random screen ID, a 6-character screen code, a random QR link token and random connection keys for paired phones.	To link your phone to the right screen.	In server memory only, never written to disk. A screen that is never paired ends 15 minutes after it goes offline; a paired screen 2 hours after it goes offline; a phone's connection after 12 hours. All of it is erased when the server restarts.
The web address you send.	To pass it from your phone to the screen.	The full address is relayed in memory and not stored on the server. Only the site's domain name (for example youtube.com) is written to the activity log below.
Activity log: time (UTC), event type (for example "phone paired", "site sent", administrator sign-ins and sign-outs and the method used, failed sign-in attempts, refused or failed Tooly sign-ins, administrator actions, rate-limit blocks, server errors), the account involved, the screen code, the domain of a site that was sent, the IP address of the device, and its browser/device description (user agent).	Security, abuse prevention and troubleshooting.	12 months, then deleted automatically.
Usage statistics: daily totals of page views, unique visitors, pages viewed, referring site (domain only), browser, operating system, device type (mobile/desktop/tablet/TV), country (from our network provider Cloudflare), and counts of QR codes shown, phones paired and sites sent.	To understand how the service is used and keep it working.	About 120 days. Unique visitors are counted with a one-way hash of the IP address and user agent mixed with a secret that changes every day, so visits can't be linked across days; the hashes are kept only for the current day. Your raw IP address is never stored for statistics.
Backups of the service's settings and the usage statistics.	To recover from mistakes or failures.	14 days.

The server may also print technical error messages (including the requested path) to its own log for troubleshooting.

2. Signing in (admins only)

Only pik's administrators sign in. There are two ways in:

Tooly SSO (sso.tooly.fyi, also operated by itpro360 LLC). When an administrator continues with Tooly, pik receives a stable account ID (sub), email address, name, profile photo address, whether the email is confirmed, and the person's Tooly security access groups. pik never sees Tooly passwords or authenticator codes. pik stores these details with the person's pik account record, together with when they accepted these terms, and refreshes them at each sign-in. Signed-in pages show your Tooly profile photo, loaded from sso.tooly.fyi. Tooly SSO's own Privacy Policy covers the Tooly account itself.
The local break-glass administrator (username admin), used only when Tooly SSO is unavailable. For this account pik stores a hashed password, the authenticator secret and hashed one-time recovery codes.

For both, pik keeps a sign-in history (time, method, IP address and device) for 30 days. Account records are kept until the administrator deletes their pik account on the My account page or another administrator deletes it; a short record of each deletion (who, when, IP address, device) is kept for 12 months. People whose Tooly account isn't in one of pik's groups are turned away. pik then shows them which account tried and a reference code, and records that attempt (Tooly ID, name, email, groups, reference, IP address and device) in the activity log below and in a short list of turned-away people that administrators can see; that list keeps the latest 200 people.

3. Cookies and browser storage

pik uses no tracking cookies and no third-party analytics, so there is no cookie banner. It uses your browser's local storage for things that only help you, and these stay on your device:

Theme (pik-theme): your Light / Dark / Auto choice.
On the phone: your phone's connection to the screen (pik-remote, for up to 12 hours), your preferred "Open it as" choice (pik-mode), the last 8 addresses you sent (pik-recent), so you can send them again with one tap, and an address you typed before scanning a screen (pik-pending), which is deleted as soon as it is sent or after 10 minutes. Tap "Disconnect this phone" or clear your browser data to remove them.
On the computer: the current screen's ID in session storage (pik-screen), so pressing Back returns to the same screen. It is cleared when you close the tab.

Signing in uses one strictly necessary session cookie (pik_admin; at most 12 hours, 1 hour for the break-glass administrator) and, around a Tooly sign-in, short-lived cookies (pik_flow, pik_notice and pik_switch, 10 minutes) that protect the sign-in against tampering, show you the result, or let you switch to another account. Visitors who don't sign in never receive either.

Camera

If you tap "Scan screen & send", pik asks your browser for permission to use your phone's camera so it can read the QR code on the computer. The camera image is processed only on your phone, inside the page; no picture or video is recorded, stored or sent to us. The camera turns off as soon as a code is found or you tap Cancel.

4. Email

pik sends only a few emails: an alert to pik's contact address when the break-glass administrator signs in, and test emails that an administrator sends from the admin console. They go through Tooly Mail Relay (itpro360's own mail relay on the same server), which hands them to SMTP2GO or Amazon Web Services (Amazon SES); pik can also send directly through SMTP2GO or Amazon SES. These providers process the recipient address and message to deliver it. Each send is recorded in the activity log (recipient, subject, which service, result), never with the message body; tracking of opens and clicks is not used.

5. Who can see your information

Anyone who can see the screen can scan its QR code or type its code and send it a web address. Only use pik where you're comfortable with that, and close the tab when you're done.
The site administrator (itpro360 LLC) can see the activity log and statistics described above.
Cloudflare, Inc. carries the traffic between your devices and our server and processes it on our behalf (for example for security and to tell us the visitor's country).
Authorities, if we are legally required to disclose information.

We don't sell or share your information for advertising.

6. Sites you open

When pik opens a web address, your browser connects to that site directly, and that site's own privacy policy applies. "Full page" sends the computer's browser to the site itself. "Player" shows the site inside pik's page: for YouTube videos pik uses YouTube's privacy-enhanced (youtube-nocookie.com) player, and for Vimeo videos Vimeo's player. These providers receive the computer's IP address and may set their own cookies. pik tells them only that the request came from pik's site (its address, not the page path).

7. Your choices and rights

Because pik has no accounts, most of what it handles is temporary and anonymous. You can clear the information stored on your devices at any time (see section 3). Administrators can see, download (Export my data) and delete their pik account on the My account page; Tooly account details are changed in Tooly SSO. You can ask us for a copy of, correction of, or deletion of activity-log entries tied to your IP address, or ask any other privacy question, by writing to [email protected]. Depending on where you live you may have further rights under local law; we will honor them.

8. Security

All traffic uses HTTPS. Connection links and keys are long random values that expire. The admin console requires Tooly SSO (which has its own two-step sign-in) or the break-glass account's password plus authenticator code; Tooly sign-ins use OpenID Connect with signed, checked tokens, and failed attempts are rate-limited and logged. No system is perfectly secure, but we work to protect the data described here.

9. Where data is kept

On a server operated by itpro360 LLC in the United States.

10. Age

pik is not directed to children. You must be at least 16 years old to use it.

11. Changes

If we change what pik collects or how long it's kept, we'll update this page and change the effective date above.

12. Contact

itpro360 LLC — [email protected].