Privacy Policy
Uncook, a product of ARLEN Systems
Last updated: 2 September 2026
Uncook is a free product with no paying users at launch. This document reflects the product as built; it is not legal advice.
The short version
Uncook doesn't store your conversations. You paste a public share link, we generate the result of the tool you chose, show it to you, and keep nothing of the conversation. No account, no cookies of our own, no profile.
We keep anonymous aggregate statistics — numbers only (how many conversations were processed, average length, language, platform). Never any conversation content, never anything that identifies you.
The only personal data we ever hold is your email address — and only if you choose to give it, so we can send you your result (kept 30 days, then deleted). You can also opt in — separately — to be warned when a future conversation starts to wear out; then we keep your email until you unsubscribe. Separately again, once you've given your email we keep a small recognition record — metadata only — for up to 24 months so a returning visitor is recognized: this record outlives the 30-day deletion above, on its own rolling 24-month clock (see "Recognition record" below). All optional, deletable anytime.
Who we are
Uncook is operated by ARLEN Systems, a company registered in France (Paris), which acts as data controller for the limited processing described here.
Contact for any privacy question or request: legal@uncook.app
What we process, and why
When you paste a public share link to an AI conversation that you generated, Uncook retrieves that conversation and sends its content to a third-party language model to generate the result of the tool you chose — Handoff, Cross, Merge, Digest, Recall, Brief, Voice, Scope, Switch, Checkpoint or Mask — which is then displayed to you. All eleven tools run on the same engine, under the same rules described here.
The content is processed only to produce the result you asked for. It is held only for the time needed to generate it, and is not stored afterwards.
What we keep
No conversation content. There is no database of conversations and no retention of their content after your result is generated. We don't create an account for you, and we set no cookies of our own. (One exception: the optional "sign in with Google" button — Google's own script may then set its own cookies; see "Providing your email via Google".) We keep aggregated anonymous statistics, and — only if you request a shareable summary — that summary for 30 days, tied to the email you provide.
Mask goes one step further. Its response comes back in two separate fields: the masked text (result) and the list of covered details (maskList). The mask list is displayed to you and never stored — keeping it out of the shareable text is a structural lock, not a promise of good conduct. And today nothing from Mask goes to storage at all: Mask has no email-delivery step.
Shared summaries. If you generate a summary to share (premium access), it is temporarily stored — for 30 days — so you can download it, share it, and be notified before deletion. It is then permanently deleted. Unlike the source conversation, never stored, the generated summary is kept for this period.
Recognition record
When you provide your email to receive a shareable summary, we also keep a small recognition record tied to that email — metadata only, never any conversation content or summary. Its purpose is twofold: to recognize a returning visitor (this is why, once you're known to us, you skip the email step on later visits) and to serve as proof of your consent.
This record is kept for a rolling 24 months: the clock restarts each time you come back, and it is purged automatically after 24 months without any interaction — neither permanent nor short-lived. It is separate from the 30-day retention above, which covers your summary and your address; this record covers only recognition, and is the one that runs on the 24-month clock. Legal basis: your consent (Art. 6(1)(a) GDPR). You can have it deleted at any time on request to legal@uncook.app.
Anonymous usage statistics
To understand and improve Uncook, we keep aggregated statistics made only of numbers: how many conversations were processed, averages for re-asks / repetitions / corrections, a "cooked" index, size, language, platform, span in days, device type (mobile / desktop / tablet), and a coarse one-word topic category chosen from a fixed list (work, personal, code, health, finance, creative, study, travel, other). No content, no personal data. Not linkable to you or to any conversation. Stored in aggregate form (on Upstash infrastructure) as counters and averages — never as a record of what anyone wrote.
Country counter
We count visits by country to see where Uncook is used. The country is provided by our host (Vercel); we keep only a per-country total and no IP address. No cookies. Legal basis: our legitimate interest in understanding the product's audience.
Optional: sending your result by email
After your result is generated, we may offer to email it to you. Entirely optional — never required, declining costs nothing.
- What we collect: the email you type + the result associated (to send it). Nothing else. Still no conversation content.
- Purpose: to send you the result you just generated. Only reason it's collected.
- Legal basis: your consent (Art. 6(1)(a)), freely given, withdrawable anytime.
- How long: if you only ask for the result email, we keep your address 30 days, then delete it automatically. One thing outlives that deletion: the recognition record tied to your email — metadata only, kept up to 24 rolling months (see "Recognition record" above).
Optional: being warned when a future conversation starts to wear out
Separately, and only via a distinct, unticked checkbox, you can ask to be warned when a future conversation starts to degrade — Uncook's follow-up feature: "Let me know when my next conversation starts to wear out." This is a separate consent from receiving your result.
- What it means: we keep your email as long as you stay opted in (not deleted at 30 days while subscribed), to send these notifications.
- Legal basis: your consent (Art. 6(1)(a)), withdrawable anytime.
- How to stop: one-click unsubscribe in every email; stops immediately, and we delete your address.
We never sell your email and never use it beyond the purposes you explicitly agreed to. No third-party marketing, ever.
Product analytics (PostHog)
We use PostHog, an analytics service, to understand how Uncook is used across sessions (which features are used, error rates, retention and journeys) so we can improve the product. PostHog stores data in the European Union (Frankfurt). PostHog Inc. (United States) may access it to provide the service; this transfer is covered by the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework (PostHog is certified under it). To recognise returning visits, PostHog stores a persistent identifier in your browser. This is not anonymous: it lets us link events across your sessions under a pseudonymous identifier (we do not attach your name; we never record the content of your conversations). Legal basis: your consent, given through our cookie banner — analytics only load after you accept, and Uncook works fully if you decline. Retention: tracker lifetime 13 months max; aggregated analytics data 25 months. You can withdraw consent at any time via the cookie settings link. PostHog acts as our processor under a data-processing agreement.
Two separate cases: analytics (PostHog) is enabled only with your consent, via the banner; our per-country visit count relies on our legitimate interest, uses no cookies and does not identify you — so it does not require consent.
Recipients
To provide the service, the following providers process data on our behalf:
- Anthropic — provides the language model that generates the result of the tool you chose. The conversation content is transmitted to Anthropic solely to generate that result, and only for the time that takes.
- Vercel — hosts the service and provides anonymous usage analytics (for example: that a handoff was generated or copied). These analytics contain no conversation content and nothing that identifies you personally.
- Upstash — stores the aggregated anonymous statistics (numbers only). No content, no personal data.
- Resend — email delivery provider. If you choose email delivery (your result or future-conversation warnings), Resend processes your address and the message solely to deliver it. Nothing else.
- Google — only if you use the optional "sign in with Google" button. Google Identity Services returns your email address to your browser; Google may set its own cookies when its script loads. We create no account and keep no Google session.
- PostHog Inc. — product analytics — storage in the EU (Frankfurt), US access covered by Standard Contractual Clauses + EU–US Data Privacy Framework. Loaded only after you consent. Data-processing agreement signed 13 July 2026.
These providers may operate outside the European Union; any such transfer is covered by appropriate safeguards (standard contractual clauses or an equivalent mechanism).
Providing your email via Google
Alongside manual entry, you can provide your email via Google sign-in. The purpose is unchanged — only the input method differs: we receive only your email address (decoded in your browser), create no account, and keep no Google session. When the email step is shown, Google's script runs in your browser and Google may set its own cookies; this happens on Google's side, and we send it nothing. Manual entry always remains available.
The Chrome extension
When you use the Uncook Chrome extension, it reads the conversation open in your active tab — only when you click it — and sends that content once to our server to generate your handoff, exactly like the website. Nothing is stored, and nothing else on the page or in your browser is read.
Your content is never used to train anything
The content you submit is not used to train any model, ours or anyone else's. It is used only to generate the result you requested, then discarded.
Two honest points
- The link is one you generated. Uncook works on a public share link that you created and chose to paste. We process only what you bring us, once, to return the result you asked for.
- A conversation may mention other people. It can contain personal data about third parties. Uncook does not store any of it — it passes through only for the moment needed to generate the result, then is discarded. Nothing about those third parties is kept, profiled, or reused.
Legal basis (GDPR)
- Generating your result — including sending the content to our language-model provider for that purpose — is done to perform the service you requested (Article 6(1)(b)).
- Anonymous usage analytics rely on our legitimate interest (Article 6(1)(f)) in understanding and improving the product, limited to non-identifying data.
- Email (if you give it): your consent (Article 6(1)(a)), withdrawable anytime.
Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability.
- If you never gave us your email: there is in practice no personal data of yours for us to retrieve, correct or delete (no content kept, statistics are anonymous numbers).
- If you gave us your email: it is the one piece of personal data we hold. Result email only → deleted after 30 days. Follow-up opt-in → kept until you unsubscribe. Always: access, correction or deletion on request, plus unsubscribe via any email's link. On request or unsubscribe, we delete your address.
For any question, contact legal@uncook.app.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Changes
If this policy changes, the updated version will be published here with a new date.
Uncook is a product of ARLEN Systems, a company registered in France. "Uncook" is a product name, not a registered trademark.