Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

• Account Information. You need an account to use TidyWeb. When you create an account, we collect your email address. You can sign in with a six-digit code sent to your email address, or with Google or Apple. If you choose Google or Apple, we receive an account identifier and the basic profile information that service shares, such as your email address, name and profile picture. We do not request access to your email, documents or contacts.
• Your Filters and Preferences. We save the websites you add, your Semantic rules, Keyword lists (including the channels, accounts and domains you block), Exempt sites, Classic controls and filtering preferences. These are saved on your device. With account sync enabled, we also store them in your account so you can use them on your other signed-in devices. Sync is on by default. You can turn it off in Account → Sync by switching off Automatically sync filters and preferences.
• Support and Feedback. When you contact us, we collect your email address, your message and any information or attachments you choose to include. We use them to respond and resolve the issue.
• Bug Reports. If you report a bug, we collect the description you write, along with the version of TidyWeb you are using, your browser, and your operating system, and we link your report to your account. Nothing else is included unless you choose to add it. Before your report is sent, we tell you what it contains and ask you to confirm. You can choose to include your filters and preferences, which are the settings account sync stores. You can also choose to include your usage today: how many requests TidyWeb made and their estimated cost, and how many items it checked and at what times. It does not name the pages or content you saw. Both are off by default, and neither is remembered between reports.
• Payments. Our payment provider collects your payment details when you buy a subscription. We do not see or store your full card number or bank details. We receive transaction and subscription information, such as your billing country, plan, payment status and renewal date.
• Free Trials and Access Codes. If you redeem an access code, we record which code you used, how many months of access it gave you, and when you redeemed it. We also record when your free trial ends, and we remember when your last free trial ended for as long as you have an account.
• Cancellations and Withdrawals. You can cancel your subscription or withdraw from your contract through forms on our website without signing in. When you do, we collect the email address you enter, the type of request and any reason you give. For a withdrawal, we also record the contract date, billing country and any refund. We retain a record of each submission, including requests that do not match an account, so we can show how we handled it.

1.2 Content Used for Filtering

TidyWeb reads supported content on the websites you enable so it can apply your filters. This can include titles, post text, descriptions, author or channel names, the websites that search results link to, image descriptions supplied by the website, product details, ratings, comments and loaded replies. Search checks use the search terms you have submitted. Relevant page context, such as the current video title and your local date and time, helps TidyWeb apply rules about what you are watching or when you are browsing.

Classic controls and Keyword matching run on your device. Semantic filtering sends the text needed for a decision to our AI providers, together with your enabled rules. Local privacy checks run before that text leaves your device. Section 4 (AI FEATURES) explains these protections and the separate online conversion of Keyword instructions. TidyWeb does not send website cookies, screenshots, image pixels, video or audio for these checks.

We do not store the content of the websites you visit on TidyWeb's servers or in your account. Remote checks send only the content needed to apply your filters, after the local privacy checks described below.

TidyWeb does not read content for filtering on websites it does not support or on the private pages described in Section 4 (AI FEATURES). It does not collect your browser's complete browsing history.

1.3 Connection and Usage Information

When your device connects to our services or providers, they receive technical information needed to deliver the connection, such as your IP address, request time and browser information. TidyWeb generates a random identifier for each installation. It is not tied to your device hardware, and it stays the same if you sign out. With account sync, we store it with each synced setting to record which installation saved it. We keep account access, subscription and usage records to operate the service, enforce usage limits and prevent abuse. Usage accounting records contain request counts and costs, rather than the page text or instructions being checked.

When you visit our website, Cloudflare estimates which country you are in from your IP address. We use it to show you prices in the right currency and the legal information that applies where you live. When you start a checkout, your browser sends us this country so that we can decide whether Stripe handles your purchase as the merchant of record. We do not store it, we never determine your precise location, and we do not use it for anything else. We do not use advertising trackers or build advertising profiles, and we do not sell your personal data.

2. How We Use Your Information

We use your information to provide TidyWeb: sign you in, save and sync your filters, decide which content to hide, manage subscriptions and free trials, answer support requests and send account or service emails.

• Providing the Services. Processing your account, filters and filtering requests is necessary to perform our contract with you, under Article 6(1)(b) of the GDPR.
• Keeping the Services Working. We use technical, usage and support information to secure the service, prevent abuse, manage costs and resolve problems. We remember when your last free trial ended, so that each account receives one free trial every six months. We rely on our legitimate interests in operating a reliable service, under Article 6(1)(f).
• Aggregated Information. We may combine information into aggregated statistics that no longer identify anyone, and we may use and publish those statistics to describe how TidyWeb is used or how it works. We do not sell aggregated information, and no information we publish can ever be traced back to you. We rely on our legitimate interest in understanding, analyzing and describing our own Services, under Article 6(1)(f).
• Legal Obligations. We process billing, tax and contractual records when the law requires it, under Article 6(1)(c).
• Consent. Where we ask for your consent to a specific use, we rely on Article 6(1)(a). You can withdraw that consent at any time without affecting earlier processing.

We use filtering content to apply your preferences, not to target advertising. We do not use it to train our own AI models. You can edit your rules or turn filtering off for a website whenever you want.

3. Disclosing Your Information

We share information with the providers needed to run the Services, and in the specific situations described below.

• Accounts and Servers. Supabase provides our account, sign-in, settings storage and backend services. Our TidyWeb database is located in Stockholm, Sweden. It holds your account, synced filters, subscription and service usage records.
• Website Hosting. Cloudflare hosts and protects our website. It processes your IP address and technical details of the pages you request to deliver them and protect against attacks. Apart from Cloudflare, our website only connects to our own servers at Supabase. Checkout takes you to Stripe's own page, and signing in with Google or Apple takes you to their websites.
• AI Providers. Semantic filtering sends locally checked text from the extension directly through OpenRouter to a selected AI provider that does not train on your data, using a key we issue for your account. The key does not contain your name or email address. Keyword conversion sends your instruction and selected website through our backend and OpenRouter to selected AI providers headquartered in the European Union or the United States that do not train on your data. The conversion does not include the page you are viewing. See Section 4 (AI FEATURES).
• Email. Resend sends sign-in codes and account, subscription, cancellation, withdrawal and bug report emails. It receives your email address and the email content, and records delivery information. When you write to us, your email is stored by our email provider IONOS in Germany.
• Sign-in Providers. Google or Apple handles sign-in when you choose it. You sign in on their service; TidyWeb does not receive your Google or Apple password. If you use Apple's option to hide your email address, Apple forwards our emails to you.
• Payments. Stripe processes subscriptions. We give Stripe your email address and an identifier for your account, so that it can connect your payment to your account, and Stripe collects your payment details and billing address on its own checkout page. In most countries, Stripe processes the payment on our behalf. In some countries, Stripe handles your purchase itself as the merchant of record, through its service Link. In that case, Stripe decides for itself how to handle your payment information and does so under Link's privacy policy, and it sends you receipts and other messages about your purchase directly. Our bank receives the payouts from Stripe and sees the transaction details that come with them. We retain the transaction information needed to manage your subscription and meet accounting obligations.
• Browser Stores. The store from which you download the extension handles that download under its own privacy policy.

We may disclose information when required by law, to protect legal rights or prevent fraud, and to professional advisers who help us meet our obligations. If the business is transferred, relevant information may transfer with it, subject to applicable data protection requirements. We do not sell your personal data or share it for targeted advertising.

4. AI Features

4.1 Pages and Content TidyWeb Leaves Alone

TidyWeb checks whether a page is eligible before reading its content for filtering. Private messages and chats, account and payment screens, notifications, drafts and private management tools are outside filtering. This includes:

• Direct messages and private conversations, including Messenger, Instagram DMs, TikTok messages, X DMs, Reddit Chat, LinkedIn Messaging, Substack Chat and Twitch Whispers. Chat panels and shared posts inside them are excluded even when they sit beside a supported feed.
• Gmail, Google Chat, Docs, Drive and Google account pages. On Google, TidyWeb only runs on Search results.
• Shopping carts, checkout, orders, payment details and private account pages, including Amazon's private lists and shopping-assistant conversations.
• Sign-in and account-recovery screens, publishing drafts, creation tools, and private business or moderation areas. TidyWeb does not use text you are typing in message or post composers.

The Pages TidyWeb skips section lists the exclusions for each website. Ordinary supported feeds, saved posts and bookmarks can still be filtered, including posts shown to a restricted audience. These are separate from private messaging.

4.2 Local Privacy Filtering

In Settings → Exempt parts of sites from filtering, you can add domains or specific subpages to Exempt sites. TidyWeb skips filtering on those pages and their nested pages, so their content is not sent for remote checks.

Removing Personal Details Before Sending. Before a filtering request leaves your device, TidyWeb checks its text locally for email addresses, international phone numbers, payment card numbers, bank account identifiers (IBANs) and credentials such as API keys and private keys. It replaces detected values with placeholders. The AI model receives the surrounding text it needs to apply your rules, without the original details that were removed.

Protecting Details in Links. TidyWeb also checks addresses included in a request. It replaces embedded login credentials and credential values in links, such as access tokens, session codes, reset tokens and API keys. The model receives the website and readable parts of the address, including relevant search terms, without the removed credentials. Local item identifiers are replaced with temporary references before sending.

Checks Stay on Your Device. These privacy filters run locally, without sending text to another service to inspect it. They cover your enabled rules and the page context, content, authors and replies included in a filtering request. The original values behind placeholders are not sent. If the local privacy check cannot complete, TidyWeb does not send the filtering request.

4.3 Local Filters and Your Choices

Classic controls hide sections on your device, and Keyword filters match content locally. Content hidden by these local filters is left out of Semantic checks. You can use these controls without sending the matched content for an AI decision.

Keyword conversion is a separate online step that turns a plain-language instruction into a reusable local filter. It runs while Settings → Keyword filtering → Automatically convert natural language to regex is on, which is the default. TidyWeb checks the instruction before sending it. If it detects a contact detail, payment identifier or credential, it does not send the instruction for conversion. You can use a quoted literal or an explicit regular expression to match it locally instead.

Account Sync Is Separate. The privacy filters protect outgoing AI checks. Your original rules and Keyword entries are still saved in your account when sync is enabled, so they work the same way on your devices. Turn off Automatically sync filters and preferences in Account → Sync to stop uploads and downloads on this device. This leaves any existing account copy in place. Avoid putting sensitive personal information into your rules or support messages.

4.4 Remote Processing

Semantic filtering uses an AI model through OpenRouter to judge whether content matches your rules.

OpenRouter Privacy Controls. We exclude paid and free provider endpoints that train on request data, and free endpoints that publish prompts or responses. We also disable OpenRouter's use of inputs and outputs to improve its product and do not opt into its data-sharing discount. These restrictions apply across our OpenRouter account.

We disable prompt and response logging and external trace broadcasting in TidyWeb's OpenRouter workspaces. We require zero data retention for model requests, so OpenRouter only routes them to provider endpoints that do not retain prompts or responses. If an eligible provider is unavailable, we do not relax these privacy requirements.

For Keyword conversion, we select suppliers by their headquarters and data policies. A supplier's headquarters does not guarantee that all processing stays within the EU or US. OpenRouter and its providers can keep operational metadata, such as token counts, timing and costs, which does not contain the text of your prompts or responses. See OpenRouter's data collection policy, OpenRouter's provider data policies, our zero data retention requirements and Section 7 (DATA RETENTION).

TidyWeb's decisions change what is displayed in your browser according to your preferences. They do not make decisions about your eligibility for employment, credit, insurance or other services with legal or similarly significant effects.

5. Cookies and Similar Technologies

TidyWeb uses browser and extension storage to keep you signed in, remember your filters and appearance preferences, and reuse filtering decisions. When you sign in on the website, it stores a session token in your browser so that you stay signed in. These functions are necessary to provide the Services. We do not use advertising cookies or cross-site tracking pixels.

If you choose Google or Apple sign-in, or visit Stripe checkout, those providers may use their own cookies and storage under their privacy policies. Clearing local storage can sign you out and remove local preferences. It does not delete your TidyWeb account or the filters already synced to it.

6. Your Privacy Rights

You have rights over the personal data we hold about you:

• Access and Correction. You can ask for a copy of your data, an explanation of how we use and share it, and correction of inaccurate or incomplete information.
• Deletion and Restriction. You can ask us to delete your data or restrict its use. You can also choose Delete account in your account settings. Cancel a renewing subscription before deleting your account. You can always contact us by email to exercise your rights. Account deletion removes your account and cloud settings; legal and payment records may remain as described in Section 7 (DATA RETENTION). It does not erase local data on your devices.
• Portability. You can ask for the information you provided, including your filters and settings, in a format you can read and transfer to another service.
• Objection. You can object to processing based on our legitimate interests. We will consider your objection and stop unless we have compelling lawful grounds to continue.
• Withdrawing Consent. Where we rely on your consent, you can withdraw it at any time without affecting earlier processing.

To use your rights, write to [email protected]. We may need to verify your identity or the authority of someone acting for you. We normally respond within one month. If a request is complex, we may take up to two further months and will tell you within the first month. Requests are normally free; we may charge a reasonable fee or decline clearly unfounded or excessive requests where the law allows. If we cannot fulfil a request, we will explain why. We will not treat you worse for exercising your rights.

You can complain to a data protection authority, including the authority where you live or the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany. You are also welcome to contact us so we can try to resolve the issue.

7. Data Retention

We keep personal data for as long as it is needed for the purposes described in this Policy. Different types of information are handled differently:

• Account and Synced Filters. These remain in your account until you change or delete them, or delete your account. Turning sync off or signing out does not delete the existing cloud copy. We keep your subscription details, including the access codes you redeemed and when your last free trial ended, for as long as you have an account.
• Local Data. Your device keeps filters, preferences and saved filtering decisions. Saved decisions are reused to avoid repeating checks and are replaced as the local cache fills. Signing out or deleting an account does not erase your local filters. You can remove local extension data by removing the extension.
• Filtering Requests. Semantic checks travel directly from your extension through OpenRouter to the AI provider. We do not store that website content on TidyWeb's servers or in your account. Our backend forwards Keyword conversion requests without saving their text as usage records. Provider retention is governed by the policies described in Section 4 (AI FEATURES).
• Usage Accounting. Backend usage accounting keeps daily request counts and costs. Records older than thirty days are removed during subsequent usage processing. These records do not contain the prompts or page content.
• Billing and Contract Records. Tax and commercial law require us to keep invoices, receipts and accounting records for up to ten years from the end of the year in which they were created. We keep these even after you delete your account, and we use them only to meet those obligations. We also keep the records of your cancellations and withdrawals, including the email address and any reason you entered, and the notices our payment provider sends us about your subscription, even after you delete your account, so that we can show that we received and handled them. Payment providers keep their own records under their policies and legal obligations.
• Support and Security. We keep correspondence and necessary operational records for as long as needed to deal with the request, protect the service or meet legal obligations. Where an email relates to your contract with us, German law requires us to keep it for six years. Our infrastructure and email providers also apply their own log and backup retention periods.
• Bug Reports. We delete bug reports thirty days after you send them, or with your account if you delete it sooner. You can ask us to delete yours sooner by contacting us.

8. Data Transfers

Our account database is in Sweden. Providers including OpenRouter, our AI providers, Google, Amazon, Cloudflare, Resend, Apple and Stripe operate internationally, and processing may take place outside the European Economic Area or the United Kingdom, including in the United States. AI processing is not restricted to our database's location.

International transfers must use the safeguards required by applicable law, such as an adequacy decision or standard contractual clauses. You can contact us at [email protected] for information about the safeguards applicable to your data and to request a copy where available. Google and Apple when you sign in with them, the browser stores, and Stripe when it handles your purchase as the merchant of record decide for themselves how to handle your information, as described in Section 3 (DISCLOSING YOUR INFORMATION).

9. How We Protect Your Information

We limit what TidyWeb reads, apply local privacy filtering before AI requests, and use encrypted connections to our services and providers. Access controls keep each account's settings separate. Sign-in credentials and filtering service keys are held in trusted extension storage and are not exposed to the websites you visit.

We take security seriously, but no service can promise complete security. If a breach requires notification, we will tell you and the relevant authorities as the law requires.

10. Children

You must be at least sixteen years old to use the Services. If you are a minor under the law of the country where you live, you may only use the Services with the consent of your parent or legal guardian. The Services are not directed at children, and we do not knowingly collect personal data from anyone below this age limit. If we learn that we hold personal data from someone below this age limit, or from a minor whose parent or legal guardian has not consented, we will delete the data and close the account. If you are a parent or legal guardian and believe your child uses the Services without your consent, or that we hold information about your child, please contact us at [email protected] and we will delete the information and close the account.

11. Changes to This Policy

We may update this Policy from time to time, for example when we change how the Services work, when we start using a new provider, or when the law requires it. The current version is always available on our website, and the date at the top tells you when we last updated it. If we make a change that materially affects how we handle your personal data or what rights you have, we will tell you by email at least thirty days before it takes effect. Smaller changes, such as adding or changing a provider or clarifying wording, take effect when we publish them. If you do not agree with a change, you can delete your account, as described in Section 6 (YOUR PRIVACY RIGHTS).

12. How to Contact Us

TidyWeb is operated by Brünnel, Maar & Zinn GbR, Hufelandstraße 12, 10407 Berlin, Germany. It is the controller for the personal data described in this Policy. If you have questions about this Policy, or if you would like to use any of the rights described in Section 6 (YOUR PRIVACY RIGHTS), please write to us at [email protected]. You may write to us at our address, but we prefer to be contacted by email, where we will be able to respond fastest.

13. Country-Specific Provisions

13.1 Residents of the United States

Sections 1 to 3 describe the information we collect, why we use it and whom we share it with. We do not sell personal information or share it for cross-context behavioral advertising. We use content that may reveal sensitive interests to provide the filtering you request, rather than to build advertising profiles.

Depending on your state and the law's applicability, you may have rights to access, correct, delete or obtain a portable copy of your information, and to opt out of certain processing. We do not carry out targeted advertising or profiling with legal or similarly significant effects. You can exercise your rights through [email protected], including through an authorized agent. If we decline a request, you can ask us to review it and we will explain any appeal rights that apply. We will not discriminate against you for using your rights.

13.2 Residents of the United Kingdom

References to the GDPR include the equivalent UK provisions where applicable. You have the rights described in Section 6 (YOUR PRIVACY RIGHTS) and can complain to the UK Information Commissioner's Office.