Privacy policy

Last updated 2026-09-24

What we store

• Account: your email address, when you created the account and last logged in, your names and tokens (only a hash of each token).
• Login codes: a hash of each emailed code, the address it was sent to and your network address, kept 1 day.
• Security records: an audit log of account actions (login, token and name changes) with your network address (the full IPv4 address, or the /64 network for IPv6), kept 180 days.
• Abuse reports: the report, the reporter's optional email and network (IPv4 /24, IPv6 /48), kept up to a year after they are closed.
• Usage: a monthly count of long-running stream time per account, kept 13 months.

What we don't store

Traffic through your tunnels is relayed, not recorded: we don't keep request or response bodies, and we don't log visitor URLs. The request inspector in the CLI keeps traffic only in your computer's memory.

The CLI

At most once a day the CLI asks github.com whether a newer release exists (turn this off with TUZY_NO_UPDATE_CHECK=1 or update_check = false). Nothing about you or your tunnels is sent.

Processors

tuzy runs on Cloudflare (Workers, Durable Objects, D1, KV, Email). Login codes are sent through Cloudflare's email service.

Deleting your data

Run tuzy account delete (confirmed by an emailed code). Your tokens are revoked and your tunnels closed at once. Your names stay reserved (not usable by others) for 12 months so nobody can take over your webhook URLs. Your email address is erased 30 days after deletion, including from abuse reports you filed; only a one-way hash is kept to link abuse history.

Contact

abuse@tuzy.dev