Privacy

UseMyTokens is an independent community project. It is not affiliated with, endorsed by, or operated by Anthropic. It is run pseudonymously, which does not reduce what is owed to you: the contact route below is monitored and requests are answered.

For anything about your data, including access, correction, export or deletion, write to privacy@usemytokens.com.

Your account. An email address, because passwordless sign-in needs somewhere to send the link. If you sign in with GitHub, your GitHub username and avatar. Whatever you choose to add to your profile: display name, handle, bio, website, timezone, skills.

What you post. Pledges, projects, proposals, agreements and signatures. These are the substance of the site and most of them are public by design.

Plan attestations. When you pledge, you state which Claude plan you hold. We record that statement, the exact wording you were shown, the time, your IP address and your browser user agent. The address and user agent are kept for abuse investigation and are never shown to other users.

Rate limiting. A counter keyed to your account or, when signed out, your IP address. Kept for at most 24 hours.

Files you upload. Avatars and images attached to what you post.

Server logs. The web server records requests. Query strings are stripped from sign-in URLs before anything is written to disk, so magic-link tokens never reach a log file.

Direct messages are end-to-end encrypted in your browser. Your device generates a keypair and wraps the private half with a passphrase that never leaves your machine. Each conversation gets its own key, wrapped separately for each participant.

The message table has a column for ciphertext and no column for plaintext. That is a structural fact rather than a promise: we cannot read your messages, cannot produce them in response to a request from you, and cannot produce them in response to a request from anyone else.

Anthropic. When the AI estimator runs on a project, that project’s title, summary, body text and tags are sent to Anthropic’s API to produce the estimate. Do not put anything confidential in a project description. If no API key is configured the estimator falls back to a deterministic rubric and nothing is sent anywhere.

Amazon SES. Delivers sign-in links and notifications, so it processes your email address and the contents of those messages.

GitHub. Only if you choose to sign in with it, in which case GitHub tells us your username, avatar and email.

There is no advertising network, no analytics tracker, and no third-party script on this site. Nothing is sold and nothing is shared for marketing, because there is nobody to sell it to and no marketing to share it for.

A session cookie so you stay signed in, and a CSRF token that stops other sites submitting forms as you. Both are strictly necessary for the site to function, and there are no others. Nothing here tracks you across sites, which is why there is no cookie banner.

Account data stays until you delete your account. Rate-limit counters are pruned after 24 hours. Backups are kept for 14 days, so deleted content can persist in a backup for up to two weeks after it disappears from the site.

Signed agreements are the exception. Once both parties have signed, the agreement and its signature records are kept even if an account is deleted, because the other party has a legitimate interest in being able to prove what was agreed. Personal details in that record are reduced to what the agreement itself needs.

You can ask for a copy of your data, ask for corrections, ask for deletion, or object to a particular use. If you are in the UK or EU, the UK GDPR and GDPR give you those rights explicitly, and we apply them to everyone rather than checking where you live first.

Write to privacy@usemytokens.com. Expect a reply within 30 days. Encrypted message contents are the one thing that cannot be provided, for the reason described above.

This page lives in the same repository as the code it describes, so a change in what the site does and a change to this page land in the same commit. The date at the top is the last substantive revision.