Privacy Policy

This policy explains what TidyTools (tools.yukai.uk) collects, why, and for how long. Controller: the independent developer who runs TidyTools, based in Taiwan. Contact: tidytools@yukai.uk.

This website

No tracking cookies and no third-party scripts. We count coarse page visits per page, with a coarse caller type and the number of the network the request came from (its ASN, which identifies an operator such as an internet provider or a cloud host, not a person). We use this to tell people from datacenter traffic. We do not store IP addresses or full User-Agent strings. Cloudflare, which hosts the site, may set a __cf_bm bot-protection cookie.

Free endpoints

For /md/<url>, /ai-crawlers/<domain> and the other free tools we count calls per endpoint, the response status and a coarse caller type derived from the User-Agent (for example "python" or "chatgpt-user"). These statistics do not contain URLs, IP addresses or full User-Agent strings. Your IP address is used in memory for rate limiting. Fetched pages may be cached for a few minutes.

Upgrade links

Links under /go/… redirect to Apify or RapidAPI, or open an email to us. We count clicks per link (product, page, coarse caller type, the host name of the referring site and the network's ASN), without IP addresses or full User-Agent strings.

Purchases and API keys

• Payment: our merchant of record, named at checkout, collects your payment details, billing address and email and processes them under its own privacy policy. We never receive card numbers.
• What we store: from it we receive and keep the email address given at checkout, its customer, checkout and order identifiers, the pack, the amount and currency. For data packs, we store a one-way hash of the download token, the selected snapshot version, payment order and revocation state. We keep a one-way hash of your API key (never the key itself), your credit balance, and one ledger line per paid call: the endpoint, the credits and the time. The ledger does not contain the URLs or data you send.
• Why: to deliver the credits you paid for, to show your balance, to handle refunds, disputes and support requests, and for accounting.
• How long: account and order records as long as your account is active and afterwards as long as accounting and tax rules require (normally up to 7 years); usage ledger lines as long as the account exists.

What the API does with your requests

• Inputs (URLs, domains, files) are processed to produce the result. Uploaded files, private links and content behind a login are not kept beyond short-lived caches. For the direct transcription page, an MP3 is fetched for a quote and again for processing but is not stored as an original file. Public YouTube videos are handled by our local YouTube and Whisper service. Finished transcript files are downloadable for seven days; their signed links then expire and the files are removed by daily cleanup.
• Results about public web pages may be stored in an internal index of public data, so repeated questions about the same public page can be answered faster. The index stores the public result, the time it was fetched and a pseudonymous hash of the caller, never your API key, email or IP address.
• Operational logs at Cloudflare include the requested URL and are kept for a limited period for debugging and abuse prevention.

Service providers

Cloudflare (hosting, database, logs), our merchant of record (payments, invoices, tax), and our own servers (Oracle Cloud and machines we operate) that fetch pages for some tools. Apify and RapidAPI handle accounts and billing for purchases made on their platforms. We do not sell or rent personal data and do not use it for advertising.

Your rights

You can ask for a copy of your data, a correction, or deletion (subject to records we must keep for accounting) by writing to tidytools@yukai.uk from the email address of your purchase. We answer within 30 days.

See also the terms of service and about and contact.