Privacy Policy

Tempered is made by Tempered Software LLC, a Texas limited liability company that does business as Tempered. It is run by its founder. Tempered Software LLC decides what personal data the app, this website and our emails collect and why, so under the EU and UK GDPR it is the controller of that data.

• Email, for privacy questions and requests too: support@tempered.to
• Post: Tempered Software LLC, 25675 Nelson Way, Ste 120 - 1067, Katy, TX 77494, United States

Mail to support@tempered.to gets an automatic first reply written with AI (section 08). A person reads every message and handles every privacy request.

• The app sends a snapshot of your PC to our server only when you run a scan, ask the advisor a question, or tick the box to add it to a bug report: hardware models, live readings, and the names of running programs and startup entries. Ask also adds a short summary of Tempered's own state, such as which of its settings and schedules are on. For scans and questions, our server passes it to Claude, an AI model made by Anthropic, to write the answer; a snapshot added to a bug report is kept with your feedback for a person to read. The snapshot holds no file contents and no file paths.
• You need an account to use the app. Every request the app makes to our server carries a sign-in token that contains your email address. Our server keeps the dates it first and last saw your account, and your app version.
• The app also checks in on its own. While you are signed in, Google renews your sign-in about once an hour, our server checks your plan about once an hour, and the app asks for replies to your feedback every 5 minutes. Signed in or not, it checks for updates every 4 hours and sends a random ID that the update library created on your PC.
• When you first sign in, we send you a welcome email with a blind copy to Trustpilot, which invites you to review Tempered about a week later. Mail to support@tempered.to gets an AI-drafted first reply, and a full copy goes to the founder's Yahoo Mail inbox (sections 07 and 08).
• Since the date at the top of this page, this website's own pages store nothing on your device for analytics. It counts visits with Cloudflare Web Analytics, which stores nothing on your device, and counts page views and clicks with HeyCatch, using an identifier that lasts only while the page is open.
• The blog at blog.tempered.to is hosted by another company, babylovegrowth. Its pages carry advertising and analytics trackers that we do not control, and some of their cookies are set for the whole tempered.to domain (section 10).
• We do not sell personal data and we do not use it to target ads.
• To get a copy of your data, correct it or delete it, email support@tempered.to from your account's address. There is no button for this in the app yet. We do it by hand and answer within one month.

AI scans and Ask

When you run a scan or ask the advisor a question (Ask), the app sends a telemetry snapshot to the Tempered advisor service, a server we run on Cloudflare. The server adds the instructions for that scan and passes everything to Claude (Anthropic), which writes the answer. The server holds the AI key, so you never need one of your own. Our server does not store a scan or Ask snapshot or your conversation (a snapshot you add to a bug report is kept, section 08). Anthropic keeps what it receives for up to 30 days, longer if its safety systems flag a request (section 15), and its commercial terms do not allow it to train its models on this content.

The snapshot a scan or a bug report sends contains:

• Hardware: CPU and GPU model names, core count, total RAM and the Windows version.
• Live readings: CPU, memory and GPU load, CPU and GPU temperature (and which sensor the reading came from), total network throughput, free and total space per drive letter, and uptime.
• The names of the 20 programs using the most memory, with their memory and CPU use and how Tempered classifies them.
• The names of your startup entries, whether each one is on, and where it is registered. Not the command each one runs.

Ask's snapshot is wider. It has all of the above, and also:

• Up to 60 program names in place of the 20: the 20 using the most memory, the 15 using the most CPU, and every program Tempered does not recognize or has classed as safe to suspend. A program that runs as several processes is one entry. Each comes with how many copies are running, whether it is suspended right now, and whether you marked it safe to suspend, besides its memory and CPU use and how Tempered classifies it.
• For each startup entry, whether Tempered can switch it.
• Tempered's own state, so the advisor can answer questions about Tempered and see what it has already changed: the app version, your plan (free, Torque or Torque Max), whether Tempered is running as administrator, whether Game Mode is on, and which of its settings are on (low power mode, run in the background, launch at startup, minimize to the tray in Game Mode, its notification switches, Security Watch and Process Watch). Also the settings of your automatic schedules (the scheduled clean's categories, interval, time window and last run, each scheduled scan, and Process Watch's schedule); the names of up to 40 programs Tempered has suspended, whether Game Mode or you suspended them, and since when; the names of up to 20 programs something else has suspended; the names of up to 60 programs you marked safe to suspend; for up to 5 pending Security Watch findings, up to 5 threat names each and when they were found; and, for each Windows tweak, whether it is applied, whether Tempered can switch it and whether it is a Torque tweak. If Tempered cannot read its own state, Ask sends the app version and your plan, marked as unavailable, in its place.

Some scans add more:

• Safe-list review: up to 40 programs Tempered does not recognize, by name, with their usage.
• Security & malware, and the Task Manager security scan: Windows Defender's status and the names and severity of any threats it found (never file paths); whether the firewall, UAC, Remote Desktop, SMBv1 and Secure Boot are on; how many entries your hosts file has; how many days since Windows last updated; and, for every startup program and for up to 25 running programs that are unsigned or run from outside the usual install folders, its name, whether it is digitally signed, the signer's name (for example "Microsoft Corporation") and the kind of folder it runs from (Windows, Program Files, Store, AppData, Temp or other). Signed programs in the usual folders are only counted. It also sends up to 10 names each of startup entries and running programs whose file could not be found. Full file paths are reduced to that kind of folder on your PC and are not sent. Running this scan also starts a real Windows Defender quick scan on your PC.
• Task Manager (Tempered), on Torque and Torque Max: a scan or question started inside it also sends a digest of what the window shows. That is the page you are on and any text in its search box; up to about 30 processes with their process IDs and CPU, memory and GPU use; whether each runs as you, as a Windows service account or as another account (never the account name); activity per disk and per network adapter, with the adapter's name (such as your Wi-Fi card's model); counts of running and stopped services, and up to 50 Windows services (not drivers) with their name, display name, whether each is running and how it starts; the latest Process Watch names; and the top of App history.

What Ask sends. Each time you send a question, or approve or skip an action the advisor proposed, the app sends the recent conversation, up to about the last 30 messages: your own words, the advisor's earlier replies and the results of actions you approved. Ask can also search the web, for example to identify a program or check whether a driver is current. Anthropic runs those searches through a search provider it chooses. The model writes the search text from your conversation and snapshot, so it can include program names, your hardware models and words from your question.

Other AI features. "What's this?" (Torque) sends the name of the program, app, startup entry or service you right-clicked, and which kind it is. "Analyze with AI" in Process Watch (Torque) sends up to 40 of the programs and services it recorded, grouped by name: name, kind, classification, when each was first seen in your local time, how long it ran, its peak memory and CPU, and how often it came back, plus the total number of sightings. "Research with AI" on a process starts an Ask question about it.

The preview. The snapshot preview on the Scans, Ask and Feedback screens ("Preview the snapshot", called "See exactly what gets sent" on Scans and Ask up to version 0.6.0) shows the snapshot as it looked when you opened the screen or the preview: the base snapshot on Scans and Feedback, and Ask's wider snapshot on Ask. A scan builds a fresh copy when it runs, Ask reuses a copy for up to 15 minutes, and a bug report reads a fresh copy when you press send, so the numbers sent differ a little from the preview. The preview does not show the scan-specific extras, the Task Manager digest, your conversation, or the sign-in token, app version and language that travel next to the snapshot.

What every request to our server carries

Using the app requires an account, so every request the app makes to our server carries your sign-in token. Google Firebase issues it. It contains your email address, whether that address is verified, your Firebase account ID, how you signed in and when, and, if you use Google sign-in, your Google account ID, your name and a link to your profile picture. Our server checks the token and uses the email address to look up your plan and count your use. It keeps, filed under that address, the date it first saw your account, the date it last saw it and the app version you last used; it does not store the account IDs. Scan and Ask requests also carry the app's version number and your language setting. As with any internet request, your IP address reaches Cloudflare each time.

Requests the app makes on its own

• Staying signed in. Firebase (Google) renews your sign-in about once an hour while you are signed in.
• Plan check. When you sign in, then every hour, when the window comes back into focus (at most once a minute), and shortly after a trial or billing period ends. It sends only the sign-in token. The first plan check for an account also triggers the welcome email (section 07).
• Feedback replies. Every 5 minutes while you are signed in, the app asks our server whether anyone has answered your feedback.
• Update check. When the app starts and every 4 hours after that, signed in or not, it asks our download host (Cloudflare R2) for the latest version. The update library we use, electron-updater, creates a random ID the first time and sends it with every check (it is kept in %APPDATA%\Tempered\.updaterId). We do not use that ID for anything, but it reaches Cloudflare with each check. When a newer version exists, the app downloads it in the background and installs it only when you choose Restart & update. There is no setting to turn update checks off.
• Locked features. When you open the Torque sheet for a locked feature, or the app shows its one-time trial offer after the walkthrough, the app tells our server which one it was. We keep only a daily total for each, not who saw it.
• Blog email setting. Opening Settings → Account asks our server whether you get new blog posts by email.
• Scheduled scans (Torque), if you set any, run on their schedule and send what a scan sends.

If "Run in the background" is on (the app asks on first launch, and you can change it in Settings), the app keeps running in the tray after you close its window, and these checks keep running with it.

Things you choose to send or open

• Feedback from the Feedback screen (section 08).
• Starting a free trial sends your language and your PC's time zone (for example "America/Chicago") to Stripe and to our record of the trial (section 06).
• Some buttons open a page in your browser: Trustpilot's review page, Stripe's checkout and billing pages, our terms and this page. Task Manager's "Search online" opens DuckDuckGo with the process name in the search. Those sites' own policies apply.
• Windows tools Tempered starts for you, such as a Defender quick scan, a Windows Update check or a DISM repair (which can download repair files from Windows Update), talk to Microsoft according to your Windows settings, not ours.
• When you uninstall Tempered by hand, the uninstaller opens tempered.to/uninstall in your browser, with the version you removed in the link. Opening that page is a request to our website (section 09). It does not happen when the app updates itself or is removed silently.

What the snapshot leaves out

It leaves out file contents, file paths and command lines, Windows account names, the computer name, IP and MAC addresses, serial numbers, the list of installed programs, and browsing history, clipboard, keystrokes and screen contents. Two limits on that: program, startup and service names are chosen by whoever made the software and can now and then contain a personal word, and the Task Manager digest includes whatever you typed into its search box. The optional settings in section 04 can send more.

The desktop app contains no third-party analytics, advertising or crash-reporting code. It takes part in two kinds of usage counting, both described above: the daily count of locked-feature opens, and the first and last seen dates and app version our server keeps with your account, which we also use to count active accounts and how many come back after their first week.

Three Ask settings in Settings, all off by default and only on Torque and Torque Max:

• "Let the advisor run commands." The advisor may propose one read-only PowerShell command at a time, such as checking a service's status or a version number. You see the exact command and approve each one, and Tempered refuses commands that look like they would change your PC. The command and up to 4,000 characters of what it printed are sent to our server and Anthropic as part of the conversation. That output can include file paths, the contents of a file the command reads, user names or network details. The command's text is recorded in your local Undo Center. Turning the setting on asks you to confirm first.
• "Let the advisor read diagnostic tool data." The advisor may read results from Windows' own tools: Reliability Monitor's stability index and latest records, including the first 120 characters of each Windows message (which can name a program and its folder); Event Viewer's crash history (time, source, event ID and stop code); hardware error counts; and GPU driver details. Each read needs your approval, is logged in your local Undo Center, and its result is sent to our server and Anthropic in the conversation. Turning the setting on asks you to confirm first.
• "Let the advisor batch-apply fixes." The advisor may propose several fixes in one turn. You still approve each one. It sends nothing beyond a normal Ask conversation.

Developer Hub (Torque), also off by default, runs a read-only server on your own PC (127.0.0.1, never reachable from the network) so AI tools on the same PC can read Tempered's measurements. It needs an access token shown only in the app, and it sends nothing to us. It can give the tool you connect more than the snapshot holds: startup entries with their full commands (which can include your Windows user name), your installed programs, full specs including network adapter MAC addresses, the Undo Center history and the Process Watch log. What that tool does with it, including sending it to its own AI provider, is up to that tool and its terms.

What Ask can change, and what stays with you. Ask can propose changes to Tempered itself: its own settings and notification switches, automatic scans and cleans, Process Watch's schedule, safe-to-suspend marks, Windows tweaks, and how Tempered looks. Each one arrives as a card that you approve or skip, and anything that is a Torque feature on its own screen is a Torque feature here too. The advisor has no tool for the three settings above, administrator mode, the Developer Hub, the confirmation prompts, or anything about your account, plan or billing, so those stay your own switches. You flip them yourself: administrator mode and the three settings above in Settings (General tab), the Developer Hub on its own screen, your account, plan and billing in Settings (Account tab), and the confirmation prompts on the Processes screen ("Skip confirmation before ending a process") and on Task Manager's own Settings page ("Ask before applying Efficiency mode", and Task Manager's own administrator switch).

One route is open-ended. "Let the advisor run commands" lets the advisor propose a command of its own wording. It is off by default, you see the exact command before it runs, and the filter that turns away commands that look like they would change your PC is a safety net, not a guarantee. Leave that setting off if you do not want that route available.

Apart from two kinds of file you create yourself (below), Tempered keeps what it measures and records in %APPDATA%\Tempered on your PC. The main file is a database, tempered.db. Tempered does not encrypt it; your Windows account protects it, as it does your other files. It holds:

• The Undo Center history: each change it records, with its old and new value, and the full text of every advisor command that ran.
• Settings, schedules, and the results of past scans and cleanups (the newest 200 of each kind).
• Your Ask conversations, saved separately for each account (filed under its email address) and for Task Manager. They stay until you press Clear conversation. Signing out does not remove them.
• Your AI usage counts, recorded against your account's email address.
• Process Watch sightings (up to 500), App history, Security Watch findings, the programs you marked safe to suspend, and the Developer Hub access token.
• If Tempered finds the database damaged, it renames the damaged file (tempered.db.corrupt-…) and starts a new one. Those copies stay in the same folder and hold the same kinds of data.

The same folder holds the app's browser storage: your Firebase sign-in session (so you stay signed in), display preferences and, if you signed in with Google, any cookies Google set during sign-in. It also holds the update ID from section 03 and, from versions before 0.5.9, an old device-id file that is no longer sent anywhere.

Two kinds of file you create yourself live elsewhere: memory dumps from Task Manager go to your Downloads folder and contain that program's memory, which can include anything it had open; Specs exports go wherever you save them. Tempered does not upload either.

Removing it. Uninstalling Tempered removes the program but not this folder. To delete everything Tempered keeps on your PC, quit Tempered (from the tray too, if it is there), type %APPDATA% into File Explorer's address bar, and delete the Tempered folder. Smaller clean-ups inside the app: Clear conversation in Ask, Clear log in Process Watch, and Delete usage history in Task Manager's App history. The Undo Center history and the run history have no clear button.

Your account. Using the app requires an account, made with an email address and password or with Google. Google Firebase Authentication runs sign-in, stores the account, and sends verification and password-reset emails. Your password goes from the app straight to Google; Tempered's server never receives it. With Google sign-in, Google gives Firebase your name, email address and profile picture link.

Payments. Torque and Torque Max are paid through Stripe. Checkout opens from inside the app, and Stripe's checkout page collects your email address, card and billing details. Tempered never sees or stores your card details. Your plan is matched to your account by the email address you give Stripe, so use the one you sign in with. From Stripe we keep your plan, subscription status, billing period dates, and Stripe's customer and subscription IDs, filed under your email address. You manage or cancel a subscription in Stripe's Customer Portal. Stripe also uses payment data for its own purposes, to prevent fraud and meet its legal duties, including screening the card you add for a trial (Stripe Radar). For that, Stripe is a controller in its own right, under its own privacy policy.

The free trial. To start the 7-day Torque trial you must be signed in with a verified email address. We check that address against past trials and subscriptions so each person gets one trial, and your language and time zone go to Stripe with the subscription so the reminder shows the right date. When the trial starts we keep:

• a salted hash of your email address (a scrambled code made from it, which lets us check a new address against past trials without that record holding the address itself; variations such as +tags are removed first), with the trial's start date and the Stripe subscription it belongs to, so the same address cannot start a second trial;
• a consent record: your email address, that you accepted the trial terms, which version of the text you saw, your language and time zone, and when;
• the private key for the one-click cancel link, and notes of which trial emails were sent.

Creator codes. If you subscribe with a creator's promo code, we keep a record linking your email address and plan to that creator's code, so we can pay the creator their share. Creators see only totals (how many subscriptions and what they earned), never who subscribed. For creators themselves we keep your name, how to reach you, your rate and your payouts.

Sales reports to HeyCatch. Our payment server is also set up to report sales to HeyCatch, our website analytics service (section 09). When someone starts a paid subscription directly, it sends Stripe's customer ID, the email address and the plan. When a trial starts or converts, it sends only the customer ID and the plan. A check of our code in October 2026 found that these reports are probably not arriving, because our payment server loads HeyCatch's library for web browsers, which very likely does not work on the kind of server we run. We list them because the code is meant to send them, and we will update this section when we fix or remove that code.

Our server sends email through Cloudflare's email service, from addresses at tempered.to. Replies to in-app feedback and announcements to the waitlist go out through Resend. The emails we write contain no tracking images, and we do not track clicks on their links.

• Welcome email. Once, the first time an account signs in to the app, to the address the account was made with, even if it is not verified yet. It is sent with a blind copy (BCC) to Trustpilot's invitation service, so Trustpilot receives the whole welcome email, including your address. About a week later Trustpilot sends you one invitation to review Tempered. It does not repeat. Trustpilot's terms say it keeps the blind copy for 30 days and other invitation data for up to 2 years. We invite everyone the same way and never filter reviews. If you would rather not hear from Trustpilot, ignore the invitation, or email us and we will ask Trustpilot to remove your address.
• Trial emails. A confirmation when your trial starts, and on day 4 one reminder that it is about to become a paid subscription, with a cancel link that asks for one confirming click. These are service notices about a coming charge, so they are sent even if you have unsubscribed from our other mail.
• Download link and check-ins (optional). If you ask us to email you the download link, or leave an address after downloading, we send the link (if you asked for it) and at most two check-ins: on day 1, whether the install worked; on day 3, where to start, with a link to pricing. We do not confirm the address first. Signing in to the app with the same address stops them, and each one has a one-click unsubscribe.
• New blog posts by email (optional). If you turn this on in the app's Settings, or sign up on this site and confirm by email, we send at most one email a week, only when there is a new post.
• Replies and announcements. Replies to your feedback or contact message, and the announcement you asked for when you joined a waitlist or left an address in a "Keep me posted" box. An announcement goes out once, and sending it removes your address from that list.
• Stripe's emails. If you pay or start a trial, Stripe may also email you receipts and billing or trial notices, according to the settings in our Stripe account.

Unsubscribing marks your address as unsubscribed so it gets no more of that mail. It does not delete the record, which is how we know not to write again; to have it deleted, email us. Unsubscribe and confirmation links contain your email address, so the address passes through Cloudflare when you click one. The download check-ins and the weekly blog digest carry our postal address and a one-click unsubscribe link.

support@tempered.to. Mail to this address arrives through Cloudflare Email Routing at a small program we run. Unless the message looks automated (newsletters, auto-replies, no-reply senders), the program sends your email address, the subject and the text of your message (up to 30,000 characters, not attachments) to Claude (Anthropic), which drafts a reply. The reply goes back to you automatically, marked as an automatic reply. A full copy of every message, attachments included, is forwarded to the founder's mailbox, which is a Yahoo Mail account. It stays there until it is deleted by hand, and Yahoo's own privacy policy applies to mail stored there. A person reads every message. The program stores no copy of its own. The log line it writes names only the sender's domain and whether the reply went out, and Cloudflare keeps the program's logs for 3 to 7 days. Cloudflare Email Routing also logs each message's sender and recipient addresses and whether it was delivered, which we can see in our Cloudflare dashboard for up to 30 days.

The contact form. What you enter (name, email address, topic and message) is stored with your browser's user-agent string and the time in our website storage on Cloudflare. A copy of what you entered, with the time but not the user-agent string, is also emailed to the founder's mailbox (the Yahoo Mail account described above), where it stays until it is deleted by hand. We read it and reply by email. It is not sent to an AI.

In-app feedback

The Feedback screen sends the category you picked, your message and the app version. On a bug report you can tick a box to add a diagnostic snapshot (the base snapshot a scan sends, described in section 03, which you can preview first); it is unticked by default. Your account's email address is attached from your sign-in so we can answer. A person reads every submission; feedback is not sent to an AI. Replies appear on the Feedback screen and may also be emailed to you, and your own replies join the same thread.

Every visit

• Cloudflare hosts the site. Every request reaches Cloudflare with your IP address, browser details, the page address and the page you came from. Cloudflare uses them to serve and protect the site, and keeps its own logs.
• Cloudflare's bot protection adds a small script to each page and can set a security cookie (section 11).
• Cloudflare Web Analytics. Cloudflare adds its own analytics beacon to every page of the live site, the uninstall page included. It reports the page path (Cloudflare says it does not record query strings), the page you came from, how fast the page loaded, and your browser type. Cloudflare says it uses no cookies and stores nothing on your device. The same beacon runs on blog.tempered.to, so our Cloudflare dashboard also shows blog visit totals.
• Fonts come from tempered.to itself. Before the date at the top of this page, they loaded from Google Fonts, which saw your IP address.

HeyCatch analytics

Every public page except the uninstall page and the creator dashboard uses HeyCatch, a product-analytics service built on PostHog, to see how the site is used. It records:

• Page views and page exits.
• Clicks and form submissions, with the text of what you clicked (not what you type into fields), and repeated frustrated clicks.
• The full page address, including campaign tags and anything after a "#". Ad click IDs in links (such as gclid and fbclid) are masked before sending; campaign tags (utm_…) are kept.
• The site you came from; your browser, operating system, device type, screen size, language and time zone.
• A few named events from our pages: download started, download link emailed, check-ins requested after a download, newsletter signup, contact form sent, demo video played and waitlist signup. None of them includes your email address.
• Your IP address, which reaches HeyCatch with each event.

HeyCatch's servers pass the data to PostHog. The HeyCatch code itself is downloaded from esm.sh, a public code host, which also sees your IP address.

• Since the date at the top of this page, HeyCatch keeps its random visitor ID in the page's memory only. It writes no cookie and keeps nothing in your browser's storage, so every page load starts a new ID and visits cannot be linked to each other through it. Its code does read your browser's storage on every page load: it briefly writes two test entries to local storage and removes them at once, and it looks up two entries of its own that our pages never create (section 11).
• HeyCatch also adds that page-load ID, as request headers, to the page's own requests to tempered.to, such as sending the contact form. Our server does not read or keep them.
• HeyCatch makes no session recordings (replays of your visit): recording is switched off in its code.
• HeyCatch does not currently respond to Do Not Track or Global Privacy Control signals. Blocking it with a content blocker breaks nothing on this site.
• We do not use this data for advertising and do not sell it.

Download clicks

When you click a download button on the homepage, the page tells our server that a download started, with any campaign tags from the link that brought you to the page, the page you came from, and the time. Our server adds the country Cloudflare reports for the request. No name, email address or IP address is stored with it. The page reads the campaign tags once, when it loads, and keeps them only in memory, so a download counts toward a campaign only if you click it on the page the campaign link opened. The installer downloads from our Cloudflare download host, which sees your IP address.

Forms and tools

• Download email (optional). The address you leave and the emails it gets are described in section 07.
• New blog posts by email. The address you enter, and whether you confirmed it.
• Mobile waitlist. Your email address, your browser's user-agent string (the browser and system name every browser sends) and the time.
• Keep me posted, and early access. The "Keep me posted" box on the features, pricing and comparison pages, and the early access form our pages show when the app is not yet available for download: your email address, your browser's user-agent string and the time. We send one email when something big ships, then remove the address (section 07).
• Contact form. See section 08.
• Site assistant. What you type goes to our server, which passes the last 12 messages of the conversation (up to 4,000 characters each) to Claude (Anthropic) to write the answer. Our server does not keep the conversation; Anthropic keeps it for up to 30 days, longer if its safety systems flag it (section 15). The conversation also stays in your browser tab until you close it (section 11). To limit abuse, we keep a count of questions per IP address for about a day, with a cap of 30 a day.
• Uninstall page. The uninstaller opens it with the version you removed in the link. No answer reaches us unless you press submit; close the tab and none is sent. Opening the page is still a visit, so Cloudflare and its analytics beacon see it; HeyCatch is not loaded there. If you submit, we store the reason you picked, anything you typed in the optional box, that version, the time and your browser's user-agent string. There is no email, account or machine identifier in it, so we cannot reply to it or tie it to you.
• Creator dashboard. The private key in your dashboard link is sent to our server to show your totals. HeyCatch is not loaded on that page.

The download-email form, the blog-email box and the uninstall page each keep a count against your IP address for up to two hours, so they cannot be used to flood someone with mail or fill the survey with junk. Each count sits on its own and is not attached to what you submitted.

If you visited before the date at the top of this page

Earlier versions of this site stored a HeyCatch ID in a cookie for up to 365 days and in your browser's local and session storage, and the homepage kept a 30-day cookie, tempered_utm, with the campaign tags of the link you arrived by. On your first visit after that date, our site script deletes them. Events HeyCatch recorded under the old ID stay with HeyCatch for its retention period (section 15).

The blog at blog.tempered.to is hosted by babylovegrowth (BLG Inc., California) on its own platform. We do not control its pages. When we checked them in October 2026 they loaded Google Tag Manager, Google Analytics, Google Ads, the Meta Pixel, the TikTok Pixel, an OpenAI advertising pixel, PostHog (babylovegrowth's own project, which also loaded its session-recording script), a Convex page-view tracker that records how far you scroll and how long you stay, and Sentry error reporting, with no consent banner. These tags set cookies and other identifiers. Some are set for the whole tempered.to domain, so your browser also sends them to tempered.to, where our pages do not use them.

As far as we can tell, the advertising and analytics accounts behind these tags belong to babylovegrowth, not to us, and we receive no data from them. babylovegrowth's privacy policy and those vendors' policies apply. The one tool of ours on the blog is Cloudflare Web Analytics (section 09), which sets no cookies. If you do not want these trackers, use a content blocker when you read the blog.

Our own pages on tempered.to write nothing to your device for analytics or advertising. Cookies that the blog's trackers set for the whole tempered.to domain can still be in your browser; they are covered below. This is everything our public pages write, and the Cloudflare and HeyCatch storage we know of:

If Cloudflare ever shows you a challenge page, it also sets its own short-lived challenge cookies (names starting cf_chl_). Cloudflare's response headers ask your browser to keep a network error reporting policy for 7 days, so that if a page fails to load, your browser can report the failure to Cloudflare.

HeyCatch's code also reads your browser's storage on every page load. Besides its two test entries, it looks for two entries of its own that our pages never create: an opt-out flag, which it also looks for among the site's cookies, and a setting for PostHog's toolbar. It would save that toolbar setting only if you opened a link made for PostHog's toolbar; our pages contain no such link.

Our site script also deletes the HeyCatch ID and the tempered_utm cookie that earlier versions of the site left behind (section 09). It touches nothing else.

The blog. babylovegrowth's tags on blog.tempered.to set their own cookies (section 10). In October 2026 we found cookies such as _ga, _gcl_au, _fbp and _ttp set by those tags for the whole tempered.to domain. They are not ours, and our pages do not use them.

The app. The desktop app stores your sign-in session, preferences, its database and the update ID on your PC (section 05). All of it serves the app itself, except the update ID, which the update library sends and we do not use.

EU and UK law asks us to name a legal basis for each use of personal data. "Contract" means we need the data to give you what you signed up for. "Legitimate interests" means we have a reason of our own, named below, that we have weighed against your privacy; you can object to these (section 16). "Consent" means you asked for it and can withdraw at any time. "Legal obligation" means a law requires it.

The update library also sends its random install ID with each update check (section 03). Delivering updates does not need it, and we do not use it.

What you have to give us

An email address, to make an account: without signing in, the app does not go past its sign-in screen. Payment details, to Stripe, if you buy a paid plan or start a trial. Everything else is optional.

Data we get from others

From Google, your name, email address and profile picture link if you sign in with Google. From Stripe, the email address and payment status from checkout. From Cloudflare, the country of a download click. From a creator's promo code, which creator referred you.

Automated decisions

Three checks run without a person: whether your address may start a free trial, Stripe's fraud screening (which can decline a card), and your plan's limits on AI use. None decides anything beyond that trial, payment or limit. AI findings are recommendations: nothing changes on your PC until you approve it. If you think a check got it wrong, email us and a person will look at it.

We use these companies to run Tempered. Where they act for us, as processors, their terms limit them to providing their service to us. Where one is a controller in its own right for part of what it receives, the table says so. We disclose data to authorities only when the law requires it.

Tempered Software LLC is in the United States, and so are most of the companies in section 13. If you use Tempered from the EU, the UK or Switzerland, your data goes to the United States and is processed there. Cloudflare also handles requests in the data center nearest to you.

For the companies that receive data from us, their terms rely on these safeguards:

• The EU-US Data Privacy Framework, with its UK extension and the Swiss-US framework: Google (Firebase), Stripe and PostHog; Cloudflare and Resend, whose re-certification was under review when we checked on October 12, 2026.
• Standard Contractual Clauses approved by the European Commission, with the UK addendum: Anthropic and HeyCatch, which are not certified under the Framework. Cloudflare, Stripe and Resend include them as well.
• Trustpilot is in Denmark, inside the EU.
• esm.sh and the Yahoo Mail account that receives support copies have no data agreement with us. We do not know where esm.sh handles requests.

You can ask us for more detail about any of these safeguards.

Where our code deletes data on a timer, the period is below; it runs from the last time the record changed. Where it does not, the table says "No automatic deletion", and we keep that data until you ask us to delete it or, for account data, until you ask us to delete your account. The two trial records are the exception: we keep them even after a deletion request (section 16).

These rights come from the EU and UK GDPR. We offer them to everyone, wherever you live.

• Right of access: to know what we hold about you and get a copy.
• Right to rectification: to have wrong data corrected.
• Right to erasure: to have your data deleted.
• Right to restriction: to have us pause using your data, for example while a question about it is settled.
• Right to data portability: to get the data you gave us in a machine-readable file.
• Right to object to any use based on legitimate interests (section 12), such as the Trustpilot invitation or website analytics.
• Right to withdraw consent at any time, for anything based on consent. This does not undo what happened before.

Objecting to marketing. You can object at any time, for free, to our use of your data for marketing, including the Trustpilot review invitation, the download check-ins and the blog emails. We will then stop, without weighing it against our reasons. Use the unsubscribe link or email support@tempered.to.

How to make a request

Email support@tempered.to from the address on your account, or the address you gave us, and say what you want. You will get the automatic first reply described in section 08; a person handles the request itself. If we cannot tell that the request comes from you, we will ask you to confirm it. We answer within one month. If a request is complicated we may need up to two more months, and if so we will tell you why within the first month. It costs nothing.

There is no button for this in the app yet, so we do it by hand. For deletion, that means your Firebase account, the records on our server described in this policy, your feedback, your blog-email and download-email records, waitlist entries, contact messages, and the copies of your emails and contact messages in our support mailbox. We ask Stripe to delete what it is allowed to, and we ask Trustpilot to delete your invitation record; if you wrote a review, Trustpilot handles it under its own policy. For a copy, we send the records we hold about you as a JSON file (a plain-text format other programs can read). The data on your PC is yours to delete (section 05). HeyCatch's website events carry no account, email address or lasting visitor ID, so we cannot pick out yours on our side. If you give us the IP address you used and roughly when you visited, we will ask HeyCatch whether it can find and delete matching events. If a sales report about you reached HeyCatch (section 06), we ask HeyCatch to delete it.

We may keep what we need to answer a payment dispute or meet a legal duty: the trial consent record, and the trial marker (a salted hash of your address, with the trial's start date and Stripe subscription ID), which only stops a second free trial. If we keep anything, we will tell you what and why.

To object to HeyCatch on this website, block its script with a content blocker. Because each page load gets a new ID, we cannot pick out your past events to stop using them.

Complaints

You can complain to us first, by email to support@tempered.to or through the form at tempered.to/contact (with "Privacy complaint" as the topic); we will confirm we received it within 30 days. You also have the right to complain to a data protection supervisory authority: in the EU, the data protection authority where you live or work (list of EU authorities); in the UK, the Information Commissioner's Office (ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

Your choices, without asking us

• Use Tempered without its AI features and without adding a snapshot to a bug report. Then no snapshot of your PC is sent; the sign-in, plan, feedback and update checks in section 03 still happen.
• Leave the optional settings in section 04 off.
• Unsubscribe from any email with its link, or turn off blog emails in the app's Settings.
• Clear your Ask conversations, the Process Watch log and App history in the app, or delete the whole %APPDATA%\Tempered folder.
• Skip the uninstall question by closing the tab.
• Block HeyCatch, and the blog's trackers, with a content blocker.

Several US states, including California, give residents privacy rights. In the terms those laws use, Tempered collects: identifiers (email address, account and Stripe IDs, IP address); names (if you sign in with Google, use the contact form, or are a creator); commercial information (your plan and subscription history); internet activity (how you use this website, and counts of your AI use); approximate location (the country of a download click, your time zone for a trial); device information (the PC snapshot); the contents of messages you send us; and sensitive personal information: your account log-in (your email address and password, which Google Firebase holds for us; our server never receives the password) and card details (collected and held by Stripe; we never receive the card number), used only to sign you in and take payment, never to infer anything about you.

Where each kind comes from, why we use it, who receives it and how long we keep it are in sections 12, 13 and 15. In the past 12 months we have disclosed these categories only to the companies in section 13, for the purposes in section 12. We have not sold personal information, and we have not knowingly sold or shared that of anyone under 16.

Sale and sharing. On the main tempered.to site and in the app, we do not sell personal data or share it for cross-context behavioral advertising (ads aimed at you based on what you do on other sites), and there are no advertising tags. The advertising tags on blog.tempered.to (section 10) are part of babylovegrowth's setup, and as far as we can tell they report to babylovegrowth's accounts, not ours. Some state laws treat ad tags on a business's own website as "sharing". We cannot switch these tags off on babylovegrowth's platform; the only change in our hands is moving the blog off our domain.

Do Not Track and Global Privacy Control. Our pages do not respond to these signals: HeyCatch records page views and clicks either way. We do not know whether the blog's tags honor them.

Tracking across sites. On tempered.to, we give no third party a cookie or other stored ID that follows you from one visit to the next. HeyCatch, Cloudflare and esm.sh do receive your IP address and browser details with each request, and HeyCatch keeps all its customers' website events in one PostHog project, so we cannot promise that no third party could connect your visits here with activity elsewhere. On blog.tempered.to, third parties can collect information about your activity over time and across websites through the tags described in section 10.

Your rights. You can ask to know what we hold, get a copy, have it corrected or deleted, and opt out of sale, sharing or targeted advertising (we do none of these on tempered.to or in the app; see above for the blog). Use the email in section 16. You can have an authorized agent ask for you; we will ask for proof that you authorized them. We will not charge you more or give you a worse service for using these rights.

Tempered is a tool for looking after a Windows PC. It is not aimed at children, and we do not knowingly collect personal data from children under 13. If you think a child under 13 has given us personal data, email support@tempered.to and we will delete it.

The app and this website talk to our server and to the services we use over encrypted connections (HTTPS). Card details go to Stripe's checkout page and never reach our server. Our server checks the sign-in token on every account request and answers each person only with their own records. Our admin tools require a password. Today Tempered is run by one person, who is the only person at Tempered with access to account records, feedback and support mail; the companies in section 13 can access data only as their terms allow. On your PC, Tempered's data is not encrypted by Tempered; your Windows account protects it.

No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities where the law requires it.

When we change this policy, we change the date at the top. If a change means we collect something new, use data for something new, or send it to someone new, we will also say so in the app's update notes or by email before it applies to you. You can ask us for an earlier version.

Questions about your data, or a request: email support@tempered.to, use the contact page or the in-app Feedback screen, or write to Tempered Software LLC, 25675 Nelson Way, Ste 120 - 1067, Katy, TX 77494, United States. All of these reach Tempered Software LLC.