Privacy Policy
Last updated 2026-09-28
We collect what we need to run the search and bill for it, and nothing for advertising. No analytics scripts, no tracking pixels, no third-party cookies. This page lists what we keep, who processes it and how to get it deleted.
Who is responsible
tweaks.cc (“we”, “us”) operates the service at https://tweaks.cc. We are the data controller for the data described here. Contact for anything privacy-related: hello@tweaks.cc.
What we collect
- Account data. Your email address, a hashed password, and sign-in timestamps. Passwords are stored only as a hash; we never see them in plain text.
- Search queries. The text you type, the mode and the catalog you pick, and the results returned. This is what the service processes to answer you.
- Credits and orders. Your credit balance and a ledger of every top-up, search charge and refund. For each purchase we receive the order number, amount, currency and the email used at checkout from Lemon Squeezy. Card numbers never reach us.
- Technical data. IP address, browser type and request timestamps in server logs, used for security, rate limiting and debugging.
We do not collect anything from your Figma or Framer accounts and do not ask for access to them.
How we use it
- To run searches and show results (performance of our contract with you).
- To keep your balance correct, charge credits and process refunds (contract and legal obligation).
- To prevent abuse, enforce rate limits and keep the service secure (our legitimate interest in running a reliable service).
- To answer support requests you send us (contract and legitimate interest).
- To improve ranking quality, using queries in aggregate and without linking them to your account (legitimate interest).
- To keep accounting records that tax law requires us to keep (legal obligation).
We do not sell personal data, and we do not use it for advertising or profiling.
Search queries and AI
Every query is sent to OpenAI to compute an embedding, the numeric form the search runs on. In Smart and Workflow modes the query and the candidate results are also sent to an OpenAI language model, which writes the explanations you see. Queries go without your name, email or account ID. OpenAI processes this under its API terms, which do not allow it to use the data to train its models.
Queries may appear in our server logs for a limited time so we can investigate failures and abuse. They are not used to build a profile of you.
Who processes it for us
- Supabase: authentication and the database that holds accounts, balances and the ledger.
- Railway: hosting for the website, the search API and the plugin index.
- OpenAI: embeddings and language-model output, as described above.
- Lemon Squeezy: payments, invoices and refunds, as merchant of record. Its own privacy policy covers what it collects at checkout.
Some of these providers process data in the United States. Transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. The exchange rate shown next to the top-up amount comes from the European Central Bank via a public API; no personal data is sent for it.
How long we keep it
- Account data: until you delete the account, then removed within 30 days.
- Credit ledger and order records: for as long as tax and accounting law requires after the purchase, even if the account is deleted. These records no longer link to a usable account.
- Search queries linked to your account: while the account exists.
- Server logs: a limited period, after which they are deleted automatically.
Your rights
Under the GDPR you can ask us to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent where processing relies on it. Email hello@tweaks.cc from the address on your account and we respond within 30 days.
You can also complain to a data protection authority: in Spain the Agencia Española de Protección de Datos, or the authority in the country where you live.
Security
All traffic is encrypted with TLS. Passwords are hashed. Balances and the ledger can only be changed by our server, never directly by a browser, and every account can read only its own rows. Payment details are handled entirely by Lemon Squeezy.
Children
tweaks.cc is not directed at children under 16, and we do not knowingly collect their data. If you think a child has created an account, email hello@tweaks.cc and we will delete it.
Changes
The date at the top shows the current version. For changes that affect how we use your data we email account holders before they take effect. Our Terms of Service cover the rest of the relationship.