Privacy Policy

Your privacy is fundamental to RunTools.link. Here's how we protect your data.

1. Overview

RunTools.link ("the Service") is built on a zero-knowledge architecture. We are committed to protecting your privacy and handling your data with the highest standards of security.

2. Information We Collect

2.1 Authentication Data

Your private key is generated locally in your browser. Your AI client sends it to our server with each request (it is part of your MCP URL) so we can identify you: we use it only while handling the request and store only a cryptographic hash (SHA-256) of it as your identifier. We do not collect passwords or personal information for account creation. If you ask for a Pro plan, we keep your email address associated with that hash.

2.2 Usage Data

We collect minimal usage data necessary to operate the Service:

  • Request timestamps and tool usage counts, for rate limiting
  • For each request: the tool name, your IP address, the hash of your key, its duration and size, and whether it failed
  • Server logs for reliability, which include the arguments sent to each tool (except tools that handle secrets, such as environment variables and Telegram)

2.3 User-Uploaded Content

Files and data you upload through the tools are stored in isolated volumes accessible only with your key. We do not access, analyze, or share your uploaded content.

2.4 OpenRocket Connector for Claude

When you connect the OpenRocket connector (https://mcp.runtools.link/openrocket) to Claude or another AI assistant, the authorization page reads the RunTools key saved in your browser (or creates one) and sends it once to authorize the connection. The tokens your AI assistant receives contain that key encrypted with a server secret; on our side we keep only a counter per connection to rotate tokens, never the key. The connector receives only the arguments of the OpenRocket tools it calls (for example, a fin count or a motor name), not your conversations, chat history or other data from the AI assistant. Rocket designs live in server memory while you work and are not saved.

3. How We Use Your Data

We use the collected data exclusively for:

  • Providing and maintaining the Service
  • Enforcing rate limits and usage quotas
  • Monitoring service health and performance
  • Preventing abuse and ensuring security

4. Data Storage and Security

All traffic uses HTTPS. Files you upload are stored in isolated per-user folders, encrypted with a key derived from your private key. We implement industry-standard security measures to protect against unauthorized access, alteration, or destruction of data.

5. Data Retention

  • Free plan: Data is ephemeral and automatically deleted after 60 days of inactivity
  • Pro plan: Data is retained as long as the subscription is active
  • Usage logs: Retained for up to 30 days for operational purposes
  • OpenRocket connector authorizations: a random connection id, a counter and a date per connection. They are not linked to your key or to you, so they hold no personal data; we may delete old ones at any time

6. Data Sharing

We do not sell, trade, or share your personal data with third parties, except: Cloudflare, which proxies all traffic to our server; the hosting provider of our server; the analytics services of the website described below; and the AI assistants you connect, which receive the results of the tools they call. We may also disclose data if required by law or to protect the rights and safety of the Service and its users.

7. Cookies and Tracking

The pages of the website (runtools.link) use Google Analytics, Google Ads conversion measurement and Ahrefs Web Analytics to understand visits, load fonts from Google Fonts, and include Cloudflare Web Analytics, a cookieless visit counter that also runs on the authorization page of the OpenRocket connector. These services may set cookies and receive your IP address and browser information under their own privacy policies. The MCP server (mcp.runtools.link), which your AI assistant talks to, does not load any of them. The Service operates without requiring cookies for authentication.

8. Third-Party Services

Some tools in the Service may interact with third-party APIs (e.g., web search, GitHub). When using these tools, your requests are proxied through our servers. We do not store the content of these requests beyond what is necessary for processing.

9. Your Rights

You have the right to:

  • Access the data we hold about your account
  • Request deletion of your data at any time
  • Stop using the Service and have your data automatically removed per retention policies
  • Contact us with any privacy-related concerns

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes constitutes acceptance of the updated policy. We will indicate the date of the last update at the bottom of this page.

12. Contact

If you have questions about this Privacy Policy, want your data deleted or need to report a security vulnerability, please contact us through the contact form on our homepage.

Last updated: October 22, 2026