Security & Consent

Privacy Policy

Last Updated: June 12, 2026

1. Introduction & Core Philosophy

At TofuFactory, we build local-first software. Our core belief is that your code, credentials, and configuration belong on your machine. This Privacy Policy outlines how we treat data on our public website (tofufactory.dev) and within the TofuFactory application.

2. The TofuFactory Desktop App (Local-First)

The TofuFactory desktop client runs entirely on your local computer:

  • Your Code Stays Local: We never upload your repositories, files, or prompt contents to our servers. All interaction with AI providers (Google Gemini, OpenAI, Anthropic, Qwen, etc.) happens directly from your machine using your own API credentials.
  • Opt-In, Anonymous Usage Analytics: The desktop application collects no telemetry by default and is silent out of the box. Any usage analytics are strictly opt-in: we collect anonymous product-interaction data (such as which features are used and where errors occur) only if you explicitly enable it. We never collect your source code, file contents, file paths, prompts, or AI provider responses, and you can disable analytics at any time.
  • License Keys: For premium users, a periodic cryptographic check is performed to validate your license key against our licensing server. This transmits only your license key and a hashed identifier of your device.

3. Website Data Collection & GDPR Compliance

When you visit our public website, we collect limited data to analyze site performance and traffic. We respect the General Data Protection Regulation (GDPR) and other privacy frameworks:

  • Opt-In Consent: We do not load any tracking cookies or initialize analytics services until you explicitly select "Accept" on our cookie consent banner.
  • Google Analytics 4 (GA4): If you consent, we use GA4 to understand how users find our site and which sections they interact with. Google Analytics does not log or store individual IP addresses under GA4's default privacy safeguards.
  • Microsoft Clarity: If you consent, we use Microsoft Clarity to capture how you interact with our website through heatmaps and session recordings. This helps us find rendering bugs and navigation friction.

4. Email Waitlist & Communication

If you sign up for our waitlist or purchase a license, we collect your email address. We use this address solely to:

  • Deliver your waitlist invitation and download links.
  • Send transactional emails, receipt details, or licensing keys.
  • Provide critical product updates (you may opt out of promotional updates at any time).

We do not sell, rent, or share your email address with third parties.

5. Your Rights Under GDPR

If you reside in the European Economic Area (EEA) or the United Kingdom (UK), you possess the following rights:

  • Right of Access: You can request a copy of the personal data we hold about you (e.g., your waitlist email).
  • Right to Rectification: You can ask us to correct inaccurate email or license details.
  • Right to Erasure (To Be Forgotten): You can request that we permanently delete your email and registration records from our waitlist systems.
  • Right to Withdraw Consent: You can change your cookie preferences at any time by clearing your browser's local storage or cookies.

To exercise any of these rights, please email us at sales@tofufactory.dev.

6. Contact Us

For questions about this policy or our privacy practices, contact us at:

TofuFactory Legal Operations
Email: sales@tofufactory.dev