Privacy
Last updated 15 October 2026. This page covers every tool on thatched-tools.pages.dev and every tool that links here.
Short version: there are no accounts. Your files, lists and settings stay in your browser. We keep a few short-lived records to take payments and stop abuse, and page counts with no personal ids.
What stays on your device
Files you open, lists you keep, settings and results stay in your browser (local storage or IndexedDB). They are not uploaded to us. Clearing the site data in your browser deletes them. Tools that fetch public data (for example recall lists) ask that public source directly; tools that talk to Bluesky send your request straight to Bluesky.
Cookies
One kind only: a cookie named tpt_... that counts how many free goes you have used in a tool (kept for up to 1 year,
also mirrored in local storage). It is strictly necessary for the free allowance, so there is no consent banner. Page counting uses
no cookies.
What our server keeps, and for how long
| Record | Why | How long |
|---|---|---|
| Result of checking your Stripe payment (paid or refunded) | so the unlock works without asking Stripe every time | 1 hour |
| Rate-limit counters keyed by your IP address, or by a hash of your email for "restore" (the email itself is never stored) | stop guessing and abuse | 1 to 25 hours |
| Random browser ids that unlocked a purchase (up to 3 per purchase) | one purchase works on up to 3 browsers | while the purchase is valid; removed on request |
| Page and event counts per day, site and page (no ids, no IP addresses, no browser details) | know which tools are used | kept |
Who processes data for us
- Stripe: takes payments. Card details go to Stripe, never to us. Stripe's own privacy notice applies.
- Cloudflare: hosts the site and runs our server code and storage (Pages, KV, Durable Objects, D1). It sees IP addresses to deliver pages.
- Amplitude: counts events. Our server sends a daily-changing id made from a one-way hash of IP address, browser string and site with a secret salt that changes every day, plus your country. No IP address, no cookie, no name.
- Sentry: receives error reports so we can fix bugs. Emails, tokens, payment ids and web address query strings are removed before sending.
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete it. Email business@thatched.ai with the Stripe receipt if it is about a purchase. We reply within 30 days. Deletion removes the browser ids and stored payment records for that purchase (the unlock then stops working on those browsers). These rights apply under UK and EU GDPR and India's Digital Personal Data Protection Act 2023. You can also complain to your data protection authority (in the UK, the ICO).
Grievance contact (India DPDP Act 2023)
Grievances: business@thatched.ai. We reply within 30 days.
Children
The tools are not aimed at people under 18.
Who we are
THATCHED LTD, registered in England and Wales, company no. 16546239. Registered office: The Bristol Office, 2nd Floor, 5 High Street, Westbury on Trym, Bristol BS9 3BY. Contact: business@thatched.ai.