HintmeshPrivacy Policy
Last updated: 23 October 2026
Hintmesh (“we”, “us”) checks which products AI assistants recommend to a website’s buyers. It runs at hintmesh.com and is operated by Ripelemons, India. This policy explains what we collect when you use Hintmesh, why, and how long we keep it. We don’t sell data, show ads, or use tracking cookies.
When you check a website
To run a free check, you sign in with your Google account. We collect and keep:
- The address you enter and the time of the check.
- What we understood from the site’s homepage: the product’s name, a one-line description and the buyer questions we wrote. We read the homepage once with HintmeshBot, only if the site’s robots.txt allows it.
- The AI assistants’ answers to those questions, the pages they cited, and what those public pages say about the products they name.
The result is at an address that can’t be guessed (for example hintmesh.com/c/…). Anyone who has the link can open it, so only share it with people you’d show it to. Results are deleted automatically after 90 days.
Website readiness checker
The website checker at /website-checker requires Google sign-in. We store the submitted URL, scan time, a small set of public observations, your checklist confirmations and scan usage in your account for 30 days. These reports are private: another person cannot open them just by knowing their link. We do not submit forms or run AI or browser-rendering jobs for this checker. We use Cloudflare's public DNS resolver to verify scan destinations. Small excerpts from the public page may appear in your saved report.
Occasional website tips and product updates are optional and off by default. We record your choice, its time and the consent wording. You can withdraw it in the checker without losing access; any future marketing email must also offer an unsubscribe option. Preference and consent records stay with your account until deletion. Signing in alone does not subscribe you to these messages.
Your IP address
To stop abuse, we limit how many checks one visitor can run. For this we store a keyed hash of your IP address (a one-way code made with a secret key, so it can’t be turned back into your IP address). We delete these hashes after 24 hours and don’t use your IP address for anything else.
Your account
When you sign in with Google, Google tells us your name, email address and profile picture; we never see your Google password. Your checks are linked to your account. We may send account or requested tracking messages. Optional marketing messages require a separate choice, and we never sell your email. We keep your account until you ask us to delete it: email hello@hintmesh.com. You can also remove Hintmesh’s access in your Google account settings.
Cookies
Signing in sets one cookie that keeps you signed in for up to 30 days (it holds a random code; we store only a one-way hash of it), plus a short-lived cookie during sign-in that protects it from forgery. They’re needed for signing in and aren’t used for tracking or advertising. Signing out deletes the sign-in cookie.
Services that process data for us
Hintmesh runs on Cloudflare, which hosts the site and database, runs HintmeshBot, and delivers pages securely. As part of this, Cloudflare processes technical data such as IP addresses. We also use:
- Cloudflare Turnstile, to check that checks come from a person and not a bot. See Cloudflare’s Turnstile privacy addendum.
- Cloudflare Web Analytics, to count page views and visits. It doesn’t use cookies or identify you, and we only see totals.
- DataForSEO, which fetches Google's AI Overview and AI Mode answers for the buyer searches we write. It receives those searches (about the checked site's category), not information about you.
- AI models from OpenAI, Anthropic and Google, reached through Cloudflare Workers AI and AI Gateway. They receive the checked site’s homepage text and the buyer questions, and search the web to answer them. They don’t receive information about you.
- Dodo Payments, our merchant of record for daily tracking. When you subscribe, Dodo collects your payment details and billing address directly; we never see your card. Dodo tells us your subscription’s status, and we keep your tracked site and its weekly results for as long as you subscribe.
These providers process data on our behalf under their own terms. Cloudflare’s network is global, so data may be processed outside your country. We don’t share data with anyone else, except where the law requires it.
Why we process this data
- To run the checks you ask for, and to keep them in your account.
- To deliver requested account and tracking messages, and optional website tips and product updates when you opt in.
- To keep Hintmesh secure and prevent abuse (rate limits and Turnstile), which is our legitimate interest.
- To find and fix mistakes in our results.
If a check is about your website
Anyone can check a public website. If you own a site and don’t want HintmeshBot to read it, block it in robots.txt; see how HintmeshBot works. If you want a check about your site deleted before its 90 days are up, email us its link.
Your rights
Depending on where you live, you may have the right to ask what data we hold about you, and to have it corrected or deleted, or to object to how we use it. Because we don’t know who you are, we can usually only find data linked to a check link you send us. Email hello@hintmesh.com and we’ll reply within 30 days. You can also complain to your local data protection authority.
Children
Hintmesh is a tool for website owners and isn’t aimed at children.
Changes
If we change how we handle data, we’ll update this page and the date at the top.
Contact
Ripelemons, hello@hintmesh.com