Privacy

Last updated 2026-10-14

Who we are. ufactory.app is operated by Ultrafactory. Questions or requests: hello@ufactory.app.

The tools (calculators, generators, jokes)

The free tools at ufactory.app/<tool>/ work in your browser. What you type into them (for example the weight in the BMI calculator or the text in the QR generator) is not sent to us or stored.

We count visits with PostHog analytics: page views, the page you came from, and a coarse location and device type, to learn which tools are useful. On pages that show ads, analytics start only if you agree in the consent message (or if the message does not apply where you are). If you say no, PostHog receives no events and sets no cookies or storage. We do not sell this data.

Pages made with ufactory (<name>.ufactory.page)

We count visits to these pages for their owners, without cookies or any storage in your browser and without third-party scripts. Our server sends PostHog the page you opened, the site you came from, your country and whether you use a phone or a computer, plus taps on the share buttons and uses of the page's tool. Instead of your IP address it sends a code made from your IP address and browser that changes every day, so you are counted once a day and cannot be followed from one day or page to the next. Your IP address is not sent. What you type into a page's tool stays in your browser.

ufactory.app itself

On ufactory.app's own pages (the home page, sign-in, your projects, billing and these legal pages) we use Google Analytics to see how people find and use ufactory, but only if you agree in the cookie message. Until you do, nothing from Google is loaded and no analytics cookies are set. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as no and do not ask. Google receives the page address without its fragment and without query parameters other than campaign tags (utm_…, gclid), the site you came from, and your browser and device type. Google signals and ad personalisation are turned off. You can change your choice at any time with Cookie settings; saying no removes the Google Analytics cookies.

When something breaks on these pages, your browser sends an error report to Sentry (sentry.io, servers in the US) so we can fix it: the error and where in our code it happened, the page address, your browser and device type, and how long the page and its requests took. Reports carry no cookies and set none, and Sentry is told not to keep your IP address. Nothing you type is included.

Ads

Some pages show ads served by Google AdSense. Google and its ad partners may use cookies or similar identifiers to show and measure ads, and to personalize them if you agree. In the EEA, the UK and Switzerland you are asked first and can say no, or choose in detail. You can change your choice at any time with the “Ad settings” link at the bottom of a page showing ads. See how Google uses information from sites that use its services and Google’s ad settings.

Cookies and similar storage

The tools themselves set no cookies. What may be stored in your browser:

• Google consent message and AdSense (pages with ads): your consent choice, and, if you agree, advertising cookies from Google and its partners such as __gads and __gpi. Purpose: show, limit and measure ads, prevent fraud. Lifetimes are set by Google, up to about 13 months.
• PostHog analytics (only if you agree, or where no consent message applies): a cookie or local-storage entry named ph_…_posthog with a random visitor ID, kept up to 1 year. Purpose: count visits.
• Google Analytics (ufactory.app's own pages, only if you agree): cookies named _ga and _ga_… with a random visitor ID, kept up to 2 years. Purpose: count visits and see how the site is used. Your choice itself is kept in local storage as uf_consent for a year, then we ask again.
• Your ufactory account (only if you sign in): the uf_session cookie on app.ufactory.app keeps you signed in (it is sent only to our API and no script can read it; it ends when you sign out; with “Keep me signed in” after 30 days without use or at most 180 days after sign-in, otherwise when you close the browser, after a day without use, or at most 7 days after sign-in), uf_oauth links the Google sign-in to your browser for 10 minutes, uf_user in local storage shows your name until you sign out, and uf_draft and uf_prompt in session storage hold your prompt until sign-in or until you close the tab. These are strictly necessary, so we do not ask for them.

You can also delete cookies and site data in your browser settings. Blocking them may stop ads or sign-in from working, but the free tools keep working.

The waitlist

If you join the waitlist, we store your email address and, if you write one, the idea you describe. We use them only to invite you to ufactory and to see what people want to build. Ask us and we remove you.

Your ufactory account

If you sign in, you do so with Google. We receive your name, email address and Google account ID, and store the prompts, plans (idea.md) and comments you write, plus a session token in your browser so you stay signed in. We use this to run the service, and we send you email only about your projects. Pages you build are public at their address unless you say otherwise.

Sharing

We use Cloudflare to host and deliver the sites, Google for sign-in, ads and (if you agree) analytics, PostHog for analytics, and model providers to draft and revise plans from your prompts. They process data for us under their own terms. We do not sell personal data.

Your rights

You can ask us to access, correct or delete your data, or object to its use, by emailing us. You can delete a project from your project list. If you are in the EEA or UK you can also complain to your data protection authority.