This policy explains what the Clawhard tools at clawhard.com and its subdomains (Swatch, Meridian, Mend, Doorman, Slop Score, AI Tab, Tells, Fluff, Lingo, Runsheet, Halves, Token Diet, and the shared MCP server at mcp.clawhard.com) collect and how it is used. “We” means Clawhard Studio. The short version: there are no accounts, we do not sell data, and most tools do their work without keeping anything.
| Where | What | Why / how long |
|---|---|---|
| All sites | Standard request data your browser sends (IP address, user agent, requested URL, approximate location from the network). | Needed to serve pages and protect the service. Processed by Cloudflare, our hosting provider. We do not build profiles from it. |
| All sites | Privacy-friendly page-view statistics from Cloudflare Web Analytics (no cookies, no cross-site tracking, no advertising). | To see which tools get used and whether pages load quickly. Aggregated by Cloudflare. |
| Web API, MCP and the tools’ forms | The text, URLs or numbers you send to a tool (for example a JSON snippet, a colour pair, a time zone, a prompt to count tokens). | Processed to produce your answer and then discarded. We do not store it. Error messages may be written to short-lived operational logs without your input. |
| Rate limiting | Your IP address, held in memory and in Cloudflare’s rate-limit service for about a minute (an hour for tools that create saved links). | To stop abuse and keep the service running for everyone. Not stored long term. |
| Halves | The group you create: group name, member names, expenses (descriptions, amounts, currency, who paid, who shares), settle-up records. Stored in a Cloudflare Durable Object keyed by a random link id. | Kept until deleted (see section 7). Anyone with the link can see and edit the group. |
| Runsheet | The event run-of-show you create: event name, schedule items, times, notes, tags, owner and edit links. Stored in a Durable Object keyed by a random link id. | Kept until deleted (see section 7). Runsheet pages ask browsers not to send the link in referrer headers. |
| Doorman, Slop Score | The web address you ask us to check, and the public robots.txt or page we fetch from that address. | We fetch it on your behalf and cache the result for roughly 10 to 15 minutes to avoid repeat load. Our requests identify themselves as Doorman or SlopScore with a link back to the tool. |
| Halves (currency) | A currency pair (for example EUR to USD) is sent to the Frankfurter exchange-rate service. | To convert amounts. No personal data is sent. |
| Your browser | Local settings and drafts saved in your own browser storage (localStorage): for example Token Diet draft text and rule choices, Halves currency and recent groups, Runsheet recent events, tool preferences. | Stays on your device. Clear it from your browser settings at any time. We do not read it. |
| Messages to us | If you contact us: your contact details and your message. | To reply and improve the tools. Kept as long as needed to deal with your message, then deleted. |
We do not use advertising cookies or trackers, we do not sell or rent personal information, and we do not knowingly collect information from children under 13. The tools are not meant for sensitive personal, health or financial secrets: please do not put anything in a Halves or Runsheet link that you would not want everyone with the link to see.
Halves groups and Runsheet events have no passwords and there are no accounts. Anyone who has the link can open and change the shared page. Treat the link like a key and share it only with people you trust. We cannot tell who is using a link.
Service providers that run the tools for us: Cloudflare (hosting, storage, analytics, network security). The exchange-rate lookup goes to Frankfurter. We may disclose information if required by law or to protect rights and safety. If the service is ever sold or merged, information may move with it under this policy.
The tools can be called by people and by AI assistants through a public API and the Model Context Protocol (MCP), with no account or key. Whatever an assistant sends is handled like any other tool input in section 1. We cannot see or control what your AI assistant does with the answers. The public pages and documentation on clawhard.com (including llms.txt) are intentionally open to search engines and AI systems, and our robots.txt says AI search, AI input and AI training on that public site content are allowed. This does not apply to the private data in Halves groups and Runsheet events, which we do not publish.
You can use the tools without giving us any personal information beyond what your browser sends. You can clear local browser storage at any time. To ask us to delete a Halves group or Runsheet event, or to ask what we hold about you, use the contact form and include the link. Depending on where you live you may have additional rights to access, correct or delete personal information, and we will honour valid requests.
There are no accounts, so nothing is kept “until an account is deleted”. Instead:
Traffic is encrypted in transit (HTTPS). Data in Durable Objects is stored by Cloudflare and removed as described above. No system is perfectly secure and we cannot guarantee absolute security.
Our providers process data in many countries. By using the tools you understand your information may be processed outside your country.
If we change this policy we will update the date at the top. Material changes will be announced on clawhard.com.
Use the contact form.