Privacy Policy
This policy explains how Tokensitter Ltd, a company in the United States, handles information when you visit our website, contact us or use Tokensitter. Contact us at hello@tokensitter.com.
Information we handle
Website and contact information
Our hosting infrastructure processes technical request information, such as IP addresses, browser information, timestamps and requested pages, to deliver and protect the website. Cloudflare may provide website analytics. Website analytics is distinct from prompt and response processing in the product.
If you request a demo or contact support by email, we receive your email address and the information you choose to send. Please do not send API keys, passwords or sensitive client material in support messages.
Local plugin and widget
The local product reads supported coding-agent usage records and configuration to show activity, plan limits, usage and savings estimates. Depending on enabled features, it processes local file paths, project names, tool output and other working context. Local features keep their configuration, usage records and backups on your device unless a feature sends information to a provider or you choose to share it.
Optional API relay and model services
When you route an application through the Tokensitter relay, requests and responses pass through our infrastructure to the selected model provider. This can include prompts, files, tool results and other content your application includes. Authentication credentials are used to authorize the requested service. Do not configure the relay for information you are not permitted to send through it.
Relay usage accounting records operational information such as model names, token counts, timestamps, costs and key identifiers. Ordinary usage accounting does not require storing full prompt or response text. Some features change this: optional reversible context temporarily stores encrypted original tool results for later recall. Optional routing may send a redacted portion of a request to an external classification service. Redaction reduces exposure but does not guarantee that all personal information is removed.
Why we use information
We use information to provide the features you enable, authenticate requests, display usage, calculate estimates, enforce configured limits, maintain reliability and security, respond to enquiries and meet legal obligations. Where a legal basis is required, the applicable basis depends on the activity, including providing a requested service, legitimate operational interests, consent where required, or a legal obligation.
Service providers and disclosures
Hosting and infrastructure providers process information needed to run Tokensitter. Cloudflare provides the website and relay infrastructure. When you enable model-dependent features, the selected model provider receives the content needed for those requests; optional routing can also use the Jev classification service. Providers apply their own terms and privacy policies to the services they supply.
We may disclose information when required by law, to protect the security or rights of users and the service, or as part of a business transaction subject to appropriate safeguards. We do not publish your private prompts or usage records as website examples without permission.
Information may be processed in the United States and other countries where the relevant providers operate. Applicable transfer protections depend on the service, contract and law.
Retention and security
Retention depends on the information and enabled feature. You control local records and backups on your device. Reversible-context records have an expiry set by their configuration; the current default is seventy-two hours. Operational counters, hosting records and support correspondence have different retention needs. Contact us for information about a particular record or to request deletion.
We use technical and organizational measures appropriate to the service. Encryption and access controls reduce risk but cannot make any system completely secure. Do not assume disabling a feature deletes its previous records or backups.
Your choices and rights
You can pause Tokensitter, disable individual optional features and stop sending application requests through the relay. Existing provider requests and records are not undone by pausing. You can review and remove local data using your device and product controls, taking care with backups and configuration you wish to retain.
Depending on your location and the applicable law, you may have rights to request access, correction, deletion or a copy of personal information, to object to or restrict certain processing, or to withdraw consent. Contact hello@tokensitter.com. We may need to verify your identity and authority before acting. You may also have the right to complain to a relevant regulator.
Children
Tokensitter is intended for professional and adult use, not for children. If you believe a child has provided personal information, contact us.
Changes and contact
We may update this policy as the product changes. We will update the date above and provide additional notice where required. Privacy enquiries: Tokensitter Ltd, United States, hello@tokensitter.com.