Privacy Policy
Last updated: November 2026
1. Overview
Utilix ("we", "us", "our") operates utilix.tech. We are committed to minimal data collection. The majority of tools on this site run entirely in your browser: no data is sent to our servers.
2. Data we collect
We collect nothing. All processing happens locally in your browser. No input data is transmitted to our servers.
Sign-in is handled by Clerk. When you create an account, we store your email address, Clerk user ID, subscription plan, and API key usage counters. We do not store passwords: authentication is delegated entirely to Clerk.
For REST API calls we log the API key used, endpoint called, timestamp, and response status. AI tools used in the browser run on your signed-in account instead of an API key, and we count each run against your plan's monthly limit. Input payloads are not stored. AI tool outputs (SVGs, generated schemas, regex patterns) may be stored to provide history and snippet features: you can delete these from your dashboard at any time.
We use Vercel Analytics to understand which pages and tools are used, including a few named events (for example a click on a suggested tool, copying the MCP install command, a newsletter signup or a feedback vote). No personally identifiable information is collected. No cross-site tracking or advertising cookies.
We count tool page views and blog post reads per page per day, at most once per browser per day, to rank popular tools and posts. These counters store only the page and the date: no IP address, account or cookie. If you answer "Was this helpful?" on a tool page, your browser keeps a random ID in its local storage so you can vote once per tool, and we store only a one-way hash of that ID with your vote. Votes are visible only to us, never shown on the site. To limit abuse we briefly hold a keyed hash of your IP address in memory; it is never written to the database.
If you sign up for new-post emails, we store your email address, where you signed up (the blog or a post), when you signed up, and when you confirmed. Nothing is sent until you confirm from the email we send you (double opt-in). We use the address only to tell you about new posts. Every email has a one-click unsubscribe link, and unsubscribing deletes your address. Signups that are never confirmed are deleted after 30 days.
Billing is handled by Paddle as merchant of record. We store your Paddle customer ID and subscription ID to manage your plan. We do not store card details: Paddle handles all payment data.
3. Cookies
Browser tools set no cookies. Authenticated sessions use a strictly necessary session cookie set by Clerk. No advertising or tracking cookies, ever. Some features use your browser's own storage, which never leaves your device on its own: recently viewed tools, your helpful votes, and the once-per-day guard on the page counters.
4. Third-party services
- Vercel: hosting and edge network. See vercel.com/legal/privacy-policy.
- Clerk: authentication. Handles sign-in, session management, and OAuth. See clerk.com/legal/privacy.
- Paddle: payments and billing, acting as merchant of record. See paddle.com/legal/privacy.
- Hostinger: server and database hosting (PostgreSQL, United States). Your account data and API usage logs are stored on our Hostinger servers. See hostinger.com/legal/privacy-policy.
- Resend: sends blog newsletter emails (confirmation and new-post emails). Your email address is passed to Resend only to deliver them. See resend.com/legal/privacy-policy.
- Anthropic: primary provider for AI tools (the server-backed generators and explainers such as NL→Regex, CLI Builder, CSS Explainer, JSON Schema Gen, SVG Generator, Commit Message Generator, and Stack Trace Summarizer), which run on Claude. Input prompts and pasted content (including git diffs, code, and config) are sent to Anthropic's API for processing. Anthropic's data retention policies apply. See anthropic.com/legal/privacy.
- OpenAI: fallback provider for the same AI tools. If Anthropic's API is unavailable or cannot complete a request, the input is sent to OpenAI's API instead. OpenAI's data retention policies apply. See openai.com/policies/privacy-policy.
5. Data retention
Browser tools store nothing. API request logs are retained for 30 days. AI generation history is retained based on your plan (5 entries for Free, 30 days for Pro). Snippets are retained until you delete them. Account data is retained until you request deletion. Newsletter addresses are kept until you unsubscribe (unconfirmed signups for 30 days). Page counters and feedback votes are anonymous and kept indefinitely. We do not sell or share your data with third parties.
6. Your rights
You may request deletion of your account and associated data at any time by emailing hello@utilix.tech. If you are located in the EU/UK, you have rights under GDPR including access, rectification, erasure, and portability.
7. Contact
Questions about this policy? Email hello@utilix.tech.