FinePrint Privacy Policy
Last updated: March 19, 2026
FinePrint is a free, AI-powered educational tool. We believe in practicing what we preach — so here's exactly what we collect, what we do with it, and what we don't do.
The Short Version
- We don't require accounts, emails, or personal information
- Documents you submit are processed in memory and never stored
- Your IP address is hashed (made irreversible) and used only for rate limiting
- We use cookieless analytics that don't track individual users
- We don't sell, share, or monetize your personal data
- We don't use your submitted documents to train AI models
What We Collect
Technical Data
Your IP address is hashed immediately upon receipt using a one-way hash function. The original IP address is never stored. The hash is used solely to enforce rate limits (5 analyses per 24-hour period) and is automatically deleted after 24 hours.
Submitted Content
URLs you submit are used to fetch publicly available web pages for analysis. The fetched text is processed in real-time by our AI model (Google Gemini API) and is not stored on our servers after the analysis is returned to you.
Text you paste or files you upload are similarly processed in memory only. They are sent to the AI model for analysis and discarded immediately after results are generated.
Website Analytics
We use Plausible Analytics, a privacy-focused, cookieless analytics service. Plausible does not use cookies, does not track individual users, and does not collect personal information. It provides us with aggregate data only — total page views, referral sources, and general geographic regions. No personal data is collected for analytics purposes.
Company Directory Data
When users submit companies to our public directory, we store:
- The company name and domain
- The TOS and Privacy Policy URLs used for analysis
- The AI-generated analysis content and grade
- A hashed version of the submitter's IP (for abuse prevention)
This is information ABOUT the analyzed company, not about the user who submitted it. No personal user data is stored in directory submissions.
Share Events
When you use the share button on an analysis, we record:
- Which page was shared (e.g., “Instagram company page”)
- Which platform was selected (e.g., “Facebook,” “Copy Link”)
- A timestamp
We do NOT record your IP address, identity, or any personal information with share events. This data helps us understand which analyses are most useful to our users.
What We Do With Your Data
| Data | Purpose | Retention |
|---|---|---|
| IP hash | Rate limiting only | 24 hours, then deleted |
| Submitted URLs/text | AI analysis only | Not stored — processed in memory |
| Analytics (Plausible) | Understand site usage (aggregate) | Managed by Plausible |
| Directory submissions | Public company directory | Indefinite (public content) |
| Share events | Understand sharing patterns | Indefinite (no personal data) |
What We Don't Do
- We don't sell your data. Period.
- We don't share personal data with third parties. The AI model (Google Gemini) processes the document text you submit but does not receive your IP address or any personal identifiers.
- We don't use cookies for tracking. Our analytics are cookieless. When display ads are enabled, ad networks may use their own cookies — we'll clearly disclose this when it applies.
- We don't train AI on your submissions. Documents you submit are processed by Google Gemini's API for analysis only. We do not use your submitted content to fine-tune, train, or improve any AI models. Google's Gemini API data handling is governed by their own terms.
- We don't build user profiles. We don't have accounts, logins, or any mechanism to track individual users across sessions.
Third-Party Services
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Google Gemini API | AI analysis of submitted documents | Google AI Privacy |
| Vercel | Website hosting | Vercel Privacy |
| Supabase | Database for company directory | Supabase Privacy |
| Upstash Redis | Rate limiting | Upstash Privacy |
| Plausible Analytics | Website analytics | Plausible Privacy |
| Jina Reader | URL content fetching | Jina Privacy |
Your Rights
Since we don't collect personal data beyond a temporary IP hash, there is minimal personal data to exercise rights over. However:
- Access: You can contact us to ask what data we hold about you (the answer is likely “none” or “a temporary IP hash that expires in 24 hours”)
- Deletion: IP hashes auto-delete after 24 hours. Share events contain no personal data. Directory submissions can be removed by contacting us.
- Opt-out of analytics: Plausible respects “Do Not Track” browser settings automatically
Children's Privacy
FinePrint is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has submitted information to us, please contact us.
Changes to This Policy
When we update this policy, we'll change the “Last Updated” date at the top and note significant changes on the website. We encourage you to review this policy periodically.
Contact
Questions about our privacy practices? Reach us at privacy@fineprint.legal.