OpenTools

Privacy Policy

Last update: October 28, 2026

1. Introduction

This Privacy Policy explains what information Humanlike, Inc. (“OpenTools”, “we”, “us”) collects through opentools.com and the OpenTools.js script served from js.opentools.com (together, the “Service”), how we use it, and the choices you have. It is part of our Terms of Service.

2. Information We Collect

Account information. When you sign in with your email address or your Google account, we receive your email address and name, and from Google your profile picture. If you sign in with a work address, we also record your company's domain and the organization we place you in. Sites you register at opentools.com/account are stored with their names, domains, and who created them.

Scans and requests. We record the domains you scan; scan results are public. If you request an Agent Walk, we store the email address, domain, and note you submit. To rate-limit scans we store a salted, one-way hash of your IP address, not the address itself.

Usage analytics. We use PostHog to understand how people use opentools.com: pages viewed, clicks, time on page, browser and device type, IP address, and approximate location. PostHog also makes session recordings of visits to opentools.com (pointer movement, clicks, scrolling, and what the page showed), with form inputs masked, along with browser console logs and page performance timings.

OpenTools.js. OpenTools.js tells AI agents apart from people. It runs on opentools.com and on sites whose owners install it. On each page it records the IP address and request headers (including the user agent), the page URL, characteristics of the browser and device (such as screen size, graphics renderer, processor cores, installed voices, and window position), and how the page is used: pointer movement, clicks, scrolling, focus, and the timing of key presses. It never records what you type or the contents of form fields. We look up who owns the IP address (for example, a cloud provider or a home internet provider).

3. Cookies and Similar Technologies

  • A sign-in cookie keeps you signed in. The Service can't sign you in without it.
  • PostHog stores an identifier in a cookie and in local storage to count visits.
  • OpenTools.js keeps a session identifier in session storage, which your browser clears when you close the tab.

4. How We Use Information

We use the information above to:

  • sign you in and show you your organization's sites;
  • run scans, rate-limit them, and respond to Agent Walk requests;
  • tell AI agents apart from people, and give site owners that verdict for visits to their sites;
  • keep the Service secure and prevent abuse; and
  • understand how the Service is used and improve it.

We do not sell personal information or use it for advertising.

5. Information from Google

If you sign in with Google, we receive your name, email address, and profile picture, and use them only to sign you in and identify your account. We don't use Google user data for advertising or share it except with the service providers in section 6 that run sign-in for us. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. How We Share Information

We share information only with:

  • Service providers that process it for us: WorkOS (sign-in and sign-in email), Google Cloud (hosting and databases), PostHog (analytics), Cloudflare (delivering OpenTools.js), and IPinfo (IP address ownership);
  • The owner of a site that runs OpenTools.js, who receives the verdict and signals for visits to their site;
  • Authorities, when the law requires it; and
  • A buyer or successor, if our business is sold or merged.

7. Sites That Run OpenTools.js

When a site other than opentools.com runs OpenTools.js, that site's owner decides to collect the information in section 2 and is responsible for telling its visitors. We process it on the owner's behalf. You can contact the site owner, or us, about it.

8. Retention

We keep account information while your account exists. PostHog session recordings are deleted after 90 days. We keep other information as long as we need it for the purposes in section 4, and delete information on request as described below.

9. Your Choices and Rights

You can ask us to access, correct, or delete your personal information, or to stop processing it, by emailing us at the address below. Depending on where you live, you may have further rights under local law, and we will honor them. You can also block analytics with your browser's settings or a content blocker.

10. Security

We send information over encrypted connections and limit access to the people and providers who need it. No system is perfectly secure, so we can't guarantee the security of information you send us.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

12. International Users

We are based in the United States and store information there. If you use the Service from elsewhere, your information is transferred to and processed in the United States.

13. Changes

We may update this Privacy Policy. When we do, we will change the date at the top of this page.

14. Contact Us

If you have any questions about this Privacy Policy or your information, please contact us at: team@opentools.com