Privacy Policy

Last updated: October 18, 2026

tmphost.io is operated by Contextual, Inc., a Delaware corporation ("Contextual", "we", "us"). Contextual is the controller of the personal data described here. This policy explains what data we collect when you or your AI agent use the website, the MCP server, the CLI or the API (together, the "Service"), and what we do with it.

Data we collect

Files you upload

The static files you or your agent upload, with their names, sizes, content types and expiry times. These files are public to anyone who has their URL.

Account data

If the Service asks you to sign in or create an API key, we store the identifier you sign in with (such as an email address) and the keys issued to you.

Technical data

Like most web services, our servers log requests: IP address, user agent, requested URL, time and response status. We use these logs to run the Service, prevent abuse and fix problems.

How we use data

• To store your files and serve them at their URL until they expire.
• To authenticate you and your agents.
• To detect and stop abuse, such as malware, phishing or illegal content.
• To keep the Service secure and working.
• To comply with the law.

We do not sell your data. We do not use the contents of your files to train AI models or for advertising.

Retention

Uploaded files are deleted automatically when they expire. Expired files may remain in backups or caches for a short period before they are purged. Server logs are kept only as long as needed for security and operations. Account data is kept while your account is active and deleted on request.

We may keep files or data longer when the law requires it, or when they are part of an abuse report we are investigating.

Sharing

We share data only with infrastructure providers that host and deliver the Service on our behalf, under confidentiality obligations, and with authorities when the law requires it.

Cookies

The website does not use advertising or tracking cookies. If you sign in, we use a cookie strictly needed to keep you signed in.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we process it. Email us to exercise any of these rights. You may also complain to your local data protection authority.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Security

Data is sent over HTTPS. Anyone with a file's URL can view that file, so do not upload secrets, credentials or sensitive personal data.

Changes

We may update this policy. We will change the date at the top when we do, and announce significant changes on this website.

Contact

Questions or requests: dev@tmphost.io.