Tuft Privacy Policy

Effective August 10, 2026

This policy explains how Firewood, Inc. (“Firewood,” “we,” “us,” or “our”) collects, uses, and discloses information when you use Tuft websites, applications, software, and related services (collectively, the “Service”).

Early access

Tuft is an early-access service, and its features may change as we develop and test the Service. This policy describes categories of information that the Service may process across its current and anticipated features. Tuft does not necessarily collect every category from every user; the information processed depends on the features you use, the services you connect, and the information you choose to provide.

We do not sell personal information or share it for cross-context behavioral advertising.

Information we collect

We may collect information you provide directly, including:

We may also collect information automatically when you use the Service, including device and browser information, IP address, identifiers, usage activity, connection information, diagnostics, crash data, and performance information. We may receive information from services you choose to connect to Tuft, consistent with your settings and their privacy practices.

How we use information

We use information to provide, maintain, personalize, and improve the Service; authenticate users and devices; process transactions; communicate with you; provide support; monitor performance; prevent fraud and abuse; protect the Service and its users; comply with law; and enforce our Terms of Use.

How we disclose information

We may disclose information to vendors that process it on our behalf; to services you connect or direct us to use; when required by law or necessary to protect rights, safety, and security; in connection with a financing, merger, acquisition, reorganization, or sale of assets; or with your consent. We do not sell personal information or share it for cross-context behavioral advertising, including information you provide, information collected automatically, or the contents of traffic transmitted through Tuft.

VPN traffic

Tuft’s VPN functionality routes traffic used to connect your device with the machine you select. Other internet traffic is not routed through Tuft. We do not inspect, retain, or sell the contents of VPN traffic, and process it only as technically necessary to transmit it.

Cookies and similar technologies

We may use cookies and similar technologies to operate the Service, remember preferences, understand usage, and improve performance. You can control cookies through your browser settings, although some features may not function properly without them.

Retention and security

We retain information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. We use reasonable safeguards designed to protect information, but no security measure is perfect.

Your choices and rights

You may update certain information through the Service and disconnect linked machines or services at any time. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. Contact us to make a request. We may verify your identity before fulfilling it and will not discriminate against you for exercising applicable privacy rights.

International use

Firewood is based in the United States. If you use the Service elsewhere, information may be processed in the United States and other countries where we or our providers operate, subject to applicable law.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy. We will update the effective date and provide additional notice when required by law.

Contact

Questions or privacy requests may be sent to privacy@tuft.dev.