We don’t see your work.

Who runs this site

thinkhard.si is run by Tushar Kholia, through a One Person Company (OPC) in his name. He is responsible for the site and for the small amount of personal data described on this page. Write to contact@thinkhard.si with any question about privacy or this policy.

What stays in your browser

• API keys, in your browser’s local storage, or only for the current tab if you turn off “Remember”.
• Saved prompts, test suites, run results, model comparisons, grades and scans, in your browser’s IndexedDB storage.
• Preferences and drafts, such as your theme and the text you were last working on.

This data never leaves your device unless you export it or send it to a model provider. Clearing this site’s data in your browser, or using Settings → Delete everything, removes it.

What goes to model providers

When you run a tool, your browser sends the prompt, the inputs you supplied and your API key directly to the provider you picked: Anthropic, OpenAI, Google, OpenRouter, Groq, Mistral, DeepSeek, xAI, or a custom endpoint you configured. The request does not pass through thinkhard.si. That provider’s terms and privacy policy govern what happens to it. Some free tiers and free models may log or use what you send; keep sensitive data off them.

To show current prices, the site also asks OpenRouter for its public list of models. That request contains no key and none of your text.

What reaches us

Loading a page is an ordinary web request. Our hosting provider, Hostinger, keeps standard access logs (IP address, browser, page requested and time) for security and operations, under its own retention rules. We do not combine these logs with anything else.

Usage counts

To learn which tools people use, and so what to build next, each page sends thinkhard.si a short anonymous note: the page’s path, such as /lab/, and one of four events:

• Page view: the page was opened.
• Tool run: the main Run button was pressed in Prompt Tester, Prompt Grader, Model Compare or the Chatbot Safety Test, or a first check ran in the Robot-Speak Checker, Fact Check List or Safe Paste. Only the event is counted, never the text.
• Hand-off: a prompt was opened here from another tool or from the library.
• Waitlist view: a Pro waitlist form came into view.

The server adds one to that day’s total for that page and event. The totals are all it keeps.

Not counted or kept: your prompts, inputs, results or keys; your IP address; your browser or device; the site you came from; the address after the path, including share links; the time of day. No cookie is set and nothing is stored in your browser for this, so the counts cannot be tied to a person or a visit, or linked from one page to the next.

Abuse limit: so that one computer cannot inflate the totals, the server mixes your IP address with a random value that is replaced every day and uses the result only to pick two counters in a table of numbers, capped at 1,000 events per day. The result itself is never saved, and the day’s random value and table are deleted when the day ends. The server also reads the browser’s user agent, only to drop requests from obvious bots, and does not store it.

Opting out: if your browser sends Global Privacy Control or Do Not Track, the site sends no counts at all. Like any request, a count request also appears in Hostinger’s access logs described above.

Waitlist and feedback forms

If you join the waitlist or send feedback, we receive your email address, the options you chose, your message, and a one-way hash of your IP address that we use only to limit abuse. We use them to reply and to tell you when a plan you asked for opens. We do not sell or share them, and we delete them on request.

The prompt repository

Ten prompts in the repository open for everyone. To keep count, your browser stores the list of prompts you have opened, in its local storage. It is never sent to us.

If you unlock the rest with your email, we receive:

• your email address;
• the kind of work you chose, if you chose one;
• whether you asked for the weekly email;
• which prompt you unlocked from, and the time;
• a one-way hash of your IP address, used only to limit abuse.

We use them to keep a record of your access, to understand in total which kinds of work the repository serves so we know what to write next, and, only if you ticked the box and then confirmed by email, to send you new prompts once a week. That is the only email we send for the repository apart from the one confirmation. Your browser also remembers that you unlocked, so you are not asked again on this device.

You give this by choice, and you can take it back at any time: every weekly email has a link that stops it in one click, and you can ask us to delete your address altogether. We keep it until you do, or until we close the repository. Emails come from contact@thinkhard.si, sent through our host, Hostinger. We do not sell or share your address. If we ever use an email service to send the weekly email, it will handle your address only to send it, and we will name it here first.

The MCP server

If you add thinkhard.si’s MCP server to an AI assistant, the assistant sends us the arguments of each call it makes: for example your search words, the slug of a prompt, a prompt to grade, or token counts to price. We use them only to answer that call. They are never stored or logged, and we keep only a daily count of calls per tool. Your assistant’s own provider handles the conversation under its own terms.

The local version of the server runs on your computer. The drafts and prompts you check with it stay there; only searches, prompt names and token counts for the repository and prices reach us.

Share links

When you create a share link, the shared content is packed into the part of the address after the “#”. Browsers do not send that part to servers, so it never reaches us. Anyone you give the link to can read what is in it.

Cookies and tracking

No cookies, no advertising, no tracking pixels and no third-party analytics. The only measurement is the anonymous usage counts above, collected by thinkhard.si itself. All scripts, fonts and images are served from thinkhard.si.

Your choices

• Export or delete everything stored in your browser from Settings.
• To see, correct or delete your waitlist, feedback or repository data, email contact@thinkhard.si from the address you used. We reply within 30 days, usually much sooner.
• The site is not directed at children under 16.

Changes

If this policy changes, the date at the top changes with it. Material changes will be noted on this page.