Privacy Policy

Last updated October 16, 2026

What we collect

• Your email address, to send sign-in links and receipts-related messages.
• A session cookie (ahw_sid) that keeps you signed in for up to 30 days, and a language cookie (ahw_lang) if you switch language.
• If you sign in with Google: the verified email address and the account identifier Google sends us. We do not get your Google password or contacts.
• Usage statistics. Umami, served from aihotwords.com, records the pages viewed, referring site, browser, device type and approximate country derived from your IP address, without cookies and without storing the IP address. Google Analytics also measures visits: it sets its own cookies (_ga) and Google processes your IP address and device information under Google's privacy policy.
• Your plan status and order records (product, amount, dates, processor reference). Card details go to our payment partners, never to us.
• A hashed IP address for rate limits on sign-in emails, kept for at most a day.
• Emails you send to support@aihotwords.com, which reach our support inbox so we can answer them.
• For "ask another model": a hashed account identifier and a daily count, to enforce the daily limit.

How we use it

To run your account and subscription, send sign-in emails, prevent abuse, answer support requests, and understand which pages people use. We do not sell personal data, and we do not run advertising trackers on this site.

Who processes it

• Cloudflare: hosting, database, and sending sign-in emails.
• Google: optional Google sign-in, and Google Analytics.
• Umami (our own instance): usage statistics without cookies.
• Waffo Pancake and Creem: payments, as merchant of record.
• OpenRouter and the model providers it routes to: the trend questions we send them contain the trend's name and public search terms, never your personal data.

Embedded videos load only when you press play; the hosting platform (TikTok, YouTube or X) may then set its own cookies under its own policy.

Where it is stored and for how long

• Account, session and order data are stored in Cloudflare's database service, encrypted in transit.
• Sign-in links expire after 20 minutes and are deleted after a day; sessions end after 30 days; rate-limit counters are deleted after a day.
• Your account and plan records are kept while your account exists; order records are kept as long as tax and accounting law requires.

Your rights

You can ask us for a copy of your data, to correct it, or to delete your account and data. Email support@aihotwords.com from the address you signed in with and we reply within 30 days. We delete your data within 30 days of a deletion request, except order records we must keep for tax and accounting. You can sign out at any time, and you can complain to your local data protection authority.