Privacy Policy

Effective: 2026-05-04. Operator-friendly summary follows the policy.

Plain summary

• We collect almost nothing.
• Most tools run entirely in your browser; nothing leaves your device.
• For AI-augmented tools, your input is sent to Anthropic for processing and is not stored by us.
• We do not use cookies, third-party trackers, or behavioral profiling.
• If you have questions: hello@glunty.com.

1. Who we are

glunty is a collection of small browser-based utilities operated as a brand by an individual. References to "we", "us", and "our" mean glunty. Contact: hello@glunty.com.

2. What we collect

The site collects two categories of data, both minimal:

• Connection metadata. When your browser requests a page, our hosting provider (Cloudflare) sees your IP address and basic request headers. This is true of every site on the public internet. We use this only to apply per-IP daily rate limits on AI-augmented tools.
• Tool input. If you use a tool that runs in your browser only (most of our catalog), your input never leaves your device. If you use an AI-augmented tool, the input you submit is forwarded to Anthropic's API for processing and the response is returned to you. We do not store the input or the response on our servers beyond the lifecycle of your request.

3. AI-augmented tool inputs

Tools labeled as AI-augmented (regex explainer, code explainer, alt text generator, improve-prompt, email tone rewriter, SQL explainer, bash explainer, color palette with AI names, Excel formula explainer, resume sharpener) send your input to Anthropic for processing. This includes the text or image you submit and any optional context fields you fill in.

Anthropic's handling of API requests is governed by their published policies, available on their website at anthropic.com. As of this policy's effective date, Anthropic does not use API inputs to train its models by default. If you have concerns about specific types of content (sensitive personal data, confidential business information, pre-release product details), do not submit them.

4. Cookies and tracking

We do not use cookies. We do not use third-party analytics (no Google Analytics, no Facebook Pixel, no behavioral trackers). We do not have advertising trackers.

If we add privacy-respecting first-party analytics in the future (we are evaluating a self-hosted Umami instance), we will update this policy and the analytics will use no cookies and collect no personally identifying data.

5. Rate-limit metadata

AI-augmented tools enforce per-IP daily limits to prevent abuse and keep the service free. To enforce this, we record a counter keyed by IP address and the UTC date in Cloudflare KV storage. The counter expires automatically after 26 hours. We do not link these counters to other data and do not retain historical records of which tools any IP used.

6. Features that may be added later

Some surface area exists in the codebase but is not currently active. If we activate these features, we will update this policy first.

• User accounts and Pro tier. Account scaffolding exists but no accounts can be created or logged into at present. When we launch Pro features, we will collect email and a hashed password, and we will update this policy to describe account-data handling, retention, and deletion before any account can be created.
• Payments. If we launch Pro tier, payments will be processed by Lemon Squeezy. We will not see or store card details. Lemon Squeezy will receive your payment information directly per their own privacy policy.
• Affiliate disclosures. The catalog currently contains no affiliate links. If we add them, each link will be marked at the point of the link with a disclosure consistent with FTC guidance.

7. Data sharing

We share data only as needed to deliver the service:

• Anthropic, for AI-augmented tool requests, as described above.
• Cloudflare, our hosting and CDN provider, which sees connection metadata as part of serving the site.

We do not sell your data, do not share it with advertisers, and do not provide it to data brokers. We will respond to lawful legal requests if compelled, and we will disclose data only to the extent legally required.

8. Data retention

• Tool inputs you submit: not stored beyond your request.
• Rate-limit counters: 26 hours.
• Server access logs (Cloudflare): per Cloudflare's standard retention.

9. Your rights

Depending on your jurisdiction, you may have rights regarding personal data:

• EU and UK residents (GDPR / UK GDPR): right to access, correct, delete, and object to processing of your personal data.
• California residents (CCPA / CPRA): right to know what categories of personal information are collected, right to deletion, right to opt out of any sale or share. We do not sell or share personal information.
• Other jurisdictions may grant comparable rights.

Because we collect very little, most rights requests reduce to "we did not store your data and there is nothing to delete." If you believe we hold personal data about you, contact hello@glunty.com and we will respond within 30 days.

10. Children's privacy

glunty is not directed to users under 16. We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and believe your child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page and post the change. For changes that affect how AI-augmented tool inputs are handled, account data, or payments, we will provide notice on the homepage in addition to updating this page.

12. Contact

Questions, requests, or concerns: hello@glunty.com. We aim to respond within 7 days for general questions and within 30 days for formal rights requests.