Clear boundaries
Data & privacy.
A practical overview of what these tools need—and what they don’t.
The public website
This marketing site uses Cloudflare Web Analytics to understand pageviews and visits. Our reporting separates website traffic from product activity. A visit is not a verified unique person. For campaign measurement, we also store an approved campaign identifier, a public landing page and a random receipt. A browser-tab session lasts up to 30 minutes; a receipt can link one preview workspace within seven days. Copying the setup prompt carries this optional receipt to your agent. It grants no account access. To understand search and AI discovery, the browser also reduces recognized referring hosts to a small source category. A recognized ChatGPT link tag can supply a source hint when no referrer is available. We store the category and evidence type, never the raw referring URL or its query. These hints do not verify who referred you; missing sources stay unknown. We do not collect arbitrary URL parameters, form contents or session replay, and we honor the browser Do Not Track setting for this campaign measurement.
TinyFeedback
Feedback is plain text. The public submission contract does not accept names, email addresses, attachments, or arbitrary metadata. Please don’t put personal or sensitive information into a feedback message.
TinyActivate
Your backend supplies a pseudonymous subject digest and a defined milestone key. Raw user IDs, email addresses, and arbitrary event properties are not part of the event contract. The owner can erase matching progress and sessions; lifetime usage counts remain.
TinyCheck and other tools
Browser checks may produce artifacts from the pages they visit. Run them only on pages you own or have permission to test, and use synthetic data. Other products have their own bounded contracts and access requirements.
Agents and ownership
Agent credentials are scoped. Private credentials, prompts, and raw customer payloads must not be shared in model-facing product results. Human claim preserves a project’s identity; it does not turn on payments or grant broader agent permissions.
Questions
Contact sanju@tinyscale.io with a data-handling question. This page describes the current product boundaries; it is not a claim that all product data is anonymous or that every product stores the same information.