Privacy Policy
Last updated October 15, 2026. Operator: Toolweather, Mexico. Contact: toolweather@mail.grokbot.com
Short version: we store as little as we can. No accounts, no cookies, no ad tracking, no raw IP addresses.
What we store
- API keys: only a one-way hash of your key, plus its creation time and daily call count. We can't see or recover your key.
- IP addresses: never stored raw. To enforce free limits (anonymous calls, key creation, signups) we keep a hash of your IP salted with a secret and the current day, so it can't be reversed easily or linked across days.
- Change-alert watches: the provider you watch, your webhook URL and its signing secret, and delivery failure counts.
- Email signups for the digest: your email address, its status (pending, confirmed or unsubscribed), hashed confirmation tokens and timestamps. Email delivery is not switched on yet: we aren't sending anything. When it is, you'll get one confirmation email first, and nothing else unless you confirm. Every email will carry an unsubscribe link.
- x402 payments: if you pay, the facilitator and the blockchain see your wallet address, the amount and the transaction, which are public on-chain. We don't link payments to your identity.
- Service data: provider status, model and pricing information from public sources. This isn't personal data.
What we don't do
No cookies or analytics trackers, no selling data, no profiling. The digest page fetches public data from our API and stores your theme choice only in your own browser.
Who processes data for us
The service runs on Cloudflare (Workers, D1 database, Pages), which processes requests to deliver them, and the code lives on GitHub. We don't sell or share personal data with anyone else, and we don't use advertising trackers or cookies.
How long we keep it
Daily usage counters and IP hashes are only needed for the current day's limits; we delete them over time and they can't be linked across days. Key records and webhook settings are kept while they're in use. Email addresses are kept until you unsubscribe or ask us to delete them.
Your choices
You can ask us to show, correct or delete data linked to your key, webhook or email address, or object to its use, by emailing toolweather@mail.grokbot.com. Because we only store hashes, we may need the key itself to find its records. Data on a public blockchain can't be deleted by anyone.
Children
The service is meant for developers and is not directed at children.
Changes
We'll update this page if our practices change, with a new date at the top.