Privacy

We run a small cafe. We do not sell your data. We do not run Google Analytics.

What we keep

• Account: email, name, slug, profile fields you type, GitHub handle if you connect GitHub.
• Passwords: never stored as passwords. We keep a salted PBKDF2 hash only.
• Session cookie (opentool_sid), httpOnly, so you stay logged in.
• First-party metrics: page path, time, anonymous visitor id in your browser, and external referrer. No advertising profile.
• Optional opt-in so builders of tools you order can email, message, or call. Off anytime on /you. Phone is not on the public profile.
• Tips go through Stripe on the Steadfast Growth merchant. Card data never touches this server. Statement line: STEADFAST GROWTH.

Who sees it

Public profile, posts, and listed tools are public. Hosting is on Cloudflare (Workers + D1). Email login codes go through our mail provider. GitHub sees the OAuth dance if you use GitHub. We do not sell lists.

How long

Account data lasts while the account exists. Ask via help to delete. We may keep what the law or safety requires.

Kids

We do not knowingly collect personal data from children under 13. Sexual content and any exploitation of minors is banned; see the house rules.

Effective 26 Aug 2026. We can update this page.