Privacy Policy

Information we handle

We collect or process only what is needed to operate the tool you choose. This can include account information, content you submit, and limited technical information used for security and aggregate analytics.

Google sign-in and guest sessions

If you sign in with Google, we receive the profile information Google makes available for sign-in, such as your name, email address, profile image, and provider account identifier. We use it to create and secure your Tulo account.

Before sign-in, Tulo may create an anonymous guest session so content you create can be associated with your browser. When you sign in, eligible guest content is transferred to your account.

Information submitted through Tulo

Depending on the feature you use, this may include URLs, text, public names, configuration settings, and account ownership information. We process that content to provide the requested feature, show it to people who receive a public link or name, and let you manage content associated with your account.

Public links and names are not private credentials. Anyone who receives or guesses one may be able to open the associated content. Do not submit passwords, payment details, confidential business material, or other sensitive information.

Analytics and technical information

For clicks, views, and counter hits, Tulo may record the event, tool resource, referrer, country, device, browser, and operating system. To estimate unique visitors, the Worker uses the request IP address, browser user agent, a private salt, and the current date to create a short daily-rotating hash. The raw IP address is not stored in the analytics database.

Analytics are best effort and may be incomplete. We do not sell this information or use it for advertising profiles.

Cookies and service providers

Authentication and guest-session cookies keep you signed in and associate your work with a session. These are essential service cookies; Tulo does not use advertising or cross-site tracking cookies. Tulo is hosted on Cloudflare, which provides the Worker, database, and related infrastructure. Google provides the sign-in service. These providers may process information in the countries where they operate and as needed to provide their services.

Security and legal disclosures

We use reasonable safeguards such as access controls, request limits, bounded inputs, and privacy-preserving analytics identifiers. No online service can guarantee that information will always remain secure.

We may disclose information when reasonably necessary to comply with law, respond to a valid legal request, protect users or the service, investigate abuse, or prevent fraud.

Retention and deletion

Content is retained only as long as needed to provide the requested feature, until you delete it, until an expiry or one-time-use rule removes it, or until Tulo removes it. Analytics events are retained for product reporting and security and may be deleted as the service evolves. Some limited records may be retained when needed to prevent abuse, resolve disputes, or comply with law. You can request deletion of account data by contacting us.

Your choices

You can avoid signing in, avoid submitting content, or stop using a tool at any time. You can also remove Tulo’s access from your Google Account; that stops future Google sign-in but does not automatically delete data already stored in Tulo. To request access, correction, or deletion of personal information associated with your account, email hello@tulo.in.

Contact and complaints

Questions, privacy requests, and complaints can be sent to hello@tulo.in. Please include enough detail for us to identify the relevant account or content without sending sensitive information in the email.

Changes to this policy

We may update this policy when the tools or their data practices change. The date above identifies the current version. Continued use after an update means the revised policy applies to future use.