/privacy

Last updated: April 20, 2026

TL;DR

  • We don't require you to create an account.
  • We don't use tracking cookies or ad networks.
  • We don't sell your data. We never will.
  • Inputs you paste are sent to an LLM provider (OpenRouter) for processing, then discarded.
  • We store a salted hash of your IP + user agent only to enforce daily rate limits.

What we collect

1. Tool inputs

When you use a tool (error explainer, README generator, etc.), the text you paste is sent to our serverless function, forwarded to an LLM provider (currently OpenRouter or Cloudflare Workers AI), and the response is streamed back to your browser. We do not store the input or output on our servers.

The LLM provider may process the data according to their own policies. OpenRouter's privacy policy is at openrouter.ai/privacy. Do not paste secrets, production credentials, or PII into the tools.

2. Rate-limit fingerprint

To enforce the free-tier limit of 5 uses per tool per day, we compute a SHA-256 HMAC of your IP address and browser user agent, using a server-side secret. Only this hash is stored in Cloudflare KV, keyed to the current day. It is automatically deleted after 24 hours. The hash cannot be reversed to identify you.

3. Server logs

Cloudflare (our hosting provider) records standard request logs (IP, timestamp, path, response code) for security and abuse prevention. These are retained according to Cloudflare's policies and are not accessible to us except in aggregate.

4. Payments (when Pro launches)

If you upgrade to Pro, payment is processed by Stripe. We never see or store your card details. Stripe's privacy policy: stripe.com/privacy.

What we don't collect

  • Names, email addresses, phone numbers (unless you email us)
  • Advertising or behavioral tracking cookies
  • Third-party analytics that identify individuals (no Google Analytics, no Facebook Pixel)
  • Your tool inputs or outputs in any persistent database

Your rights

Since we don't hold identifying data about you, there is typically nothing for us to return, delete, or correct on request. If you believe we hold information about you and want it removed, email us and we will investigate.

Contact

Questions about this policy? Email hello@tuput.com.

Changes

If this policy changes materially, we'll update the "Last updated" date above and, for significant changes, post a banner on the homepage for 14 days.