Privacy
What leaves your browser, what does not, and what the two tools and the extension keep — one policy for the whole house.
Last updated · 2 September 2026
What this covers
Untilt is a small house of free tools for thinking straight, made by one person: Doxa, which walks a decision through the cognitive biases likely to be skewing it, and Elenchus, which reads a text and reports how its reasoning holds together — as a website and as a Chrome extension. This page covers all three.
The short version: there is no account, no cookie and no advertising. The only things that ever leave your browser are the text you deliberately submit for analysis, and an anonymous page-view count.
Page counts, without cookies
The house pages and Doxa load a self-hosted Umami script to count page views. It sets no cookie, uses no advertising identifier, and does not keep your IP address; it tells the author which pages are read and roughly how often, plus coarse technical data — country, browser, device type and referrer — and nothing about who you are. Elenchus's website and the extension load no analytics at all.
Doxa's AI-guided check
If you choose "Help me think it through", the text you write is sent to a small function on Untilt's host, which forwards it to a general-purpose language model at Groq. When Groq cannot answer, the request may be routed through OpenRouter to a fallback model hosted by Google. Untilt stores none of your text; each provider's own free-tier terms apply to what it receives. How this is built explains what the model is and is not.
To keep the free service available, requests are rate-limited. The limiter keeps a one-way hash of your IP address combined with the current day, never the address itself, and that record is deleted the next day.
Elenchus on the web
When you paste a text into Elenchus, it is sent to a small proxy running on Cloudflare, which forwards it to a language model through OpenRouter and returns the analysis. The proxy stores none of the text. The free tier means the model provider may log what it receives; avoid analysing confidential text there, or use your own API key in the extension.
The proxy enforces a small daily allowance per visitor and a service-wide ceiling. To count them it keeps, for the current day only, your network address as the counter key — IPv4 as-is, IPv6 shortened to its /64 prefix; the count and the key are discarded on the first request of the next UTC day, and no address is written to any log.
The web version only is protected by Cloudflare Turnstile, a bot check that runs before an analysis. Turnstile sends Cloudflare a token, the site's key and your IP address so it can decide whether you are a bot; that exchange is between your browser and Cloudflare, under Cloudflare's own privacy policy.
The Elenchus extension
The Chrome extension reads a page only when you ask it to, and sends that page's text to the same proxy as the website, with its own daily allowance — larger than the website's — and the same no-storage rule. There is no Turnstile in the extension.
If you enter your own API key, it is kept in the extension's local storage on this computer only — deliberately never in Chrome's synced storage — and your page text then goes straight to the provider you configured, not through the proxy. Your provider choice, its URL and the model name are kept in Chrome's synced storage, so they follow your Chrome profile across devices.
What these tools do not do
They do not build a profile of you, do not share anything with advertisers, do not sell anything, and do not read a page or a text you have not submitted. They are not intended for children, and they do not knowingly collect anything from anyone.
Changes and contact
When this policy changes, the date at the top changes with it, and the code the policy describes is checked against it in the same change. Questions go to elenchus@revah.paris.