Privacy Policy

This policy explains, in plain language, what data thetensor.site (“we”, “the site”) collects, why we collect it, how long we keep it, and the choices you have. We run a small, honest operation: the less data, the better. If anything here surprises you, it should not — we designed the site so the list of things we know about you stays very short.

1. Who we are

TheTensor is an independent open-source project. The site you are reading promotes and distributes TheTensorTune, a free LoRA fine-tuning workbench released under Apache-2.0. You can reach us through the About page, the problem-report button on any page, or our public channels (GitHub, Telegram, X).

2. What we collect when you just browse

• Anonymous page-view and download counts (which page, which language, roughly when).
• A random session id generated in your browser (localStorage key tt_sid) that links the pages of a single visit together. It is not derived from your identity and cannot be traced back to you.
• The user-agent string of your browser, used only to classify traffic as human, search-engine bot or AI crawler so our statistics stay honest. The truncated string is visible to the site administrator and nobody else.
• Your language choice, stored in your browser (localStorage key tt-lang).

We do not fingerprint your device, we do not record mouse movements, and we do not sell or share this data with anyone. Analytics exist for one reason: to know which lessons and posts are useful so we can write more of them.

3. Google Analytics

The site uses Google Analytics (tag G-FS7GLS7EJK). Google sets its own cookies (such as _ga) and processes data such as your approximate region, device category and the pages you open. That data is governed by Google's privacy policy. You can block Google Analytics with any ad-blocker or with Google's official opt-out browser add-on — the site works identically without it.

4. Accounts and email

Downloading TheTensorTune requires a free account so we can keep the download queue fair and let you know when a new version ships. When you register we store:

• Your email address — it is your login and our only way to reach you.
• Your name, if you choose to give one (optional).
• A scrypt hash of your password. We never see or store your actual password; the hash cannot be reversed into it.
• A count of files you have downloaded, to spot abuse.

Verification and password-reset codes are stored only as hashes, expire after 10 minutes, and are deleted the moment they are used. We send four kinds of email: the code itself, a welcome note after registration, a reset code when you ask for one, and — if you do not switch them off — occasional product announcements. Every announcement email includes a way to opt out, and you can also ask us to remove you at any time.

5. Reports and messages you send us

Messages you send through the questions form or the “Report a problem” button are stored in our admin inbox together with the page you were on and, if you chose to include it, a reply-to email. We keep them so we can fix the problems they describe, and we do not use them for anything else.

6. What we never do

• We never sell, rent or trade your data.
• We never run third-party advertising or tracking networks.
• We never send marketing emails you did not sign up for.
• We never ask for more identity than an email address — no phone numbers, no real names, no payment details (there is nothing to pay for).

7. Cookies and local storage

The site itself sets no tracking cookies. We use localStorage for two things only: your language choice and the anonymous visit id described above. After signing in, a strictly necessary session cookie (tt_user) keeps you logged in; it is http-only, marked Secure in production, and expires after 30 days. Google Analytics may set its own cookies as described in section 3.

8. How long we keep things

• Anonymous analytics events: kept in aggregate form; raw events older than a year are pruned.
• Account records: kept until you ask us to delete them.
• Reports and messages: kept while the site exists, so we can spot recurring problems.

9. Your choices

You can: browse the whole site without an account (only the file download needs one); block Google Analytics as described above; clear localStorage at any time; ask us to delete your account and every report tied to your email; ask us to stop sending announcement emails while keeping your account. To exercise any of these, send us a message through the About page or the report button — no forms, no verification hoops.

10. Security

Passwords are stored as salted scrypt hashes, one-time codes as SHA-256 hashes, and sessions as random 256-bit tokens of which only the hash is kept. Traffic to the site is encrypted with TLS by our hosting setup. Access to the admin panel is protected by a private password and rate-limited. If you believe you found a security issue, please report it through the problem-report button — we fix reported issues fast and credit reporters.

11. Children

The site is a technical tool and is not directed at children under 13, and we do not knowingly collect data from them. There is nothing on the site a child could buy — everything is free software.

12. Changes to this policy

If we change this policy in a way that matters, we will note the change date above and announce it on the site. Older versions remain available on request. Questions about anything here? Ask us — plainly, and we will answer the same way.