Your idea stays yours
In short: we don't store your idea, publish it or use it to train anything. There are no accounts, no ad trackers and no cookies.
Who is responsible
The data controller for this site is TaviTavi Ltd, a company registered in England and Wales, registered office 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE, United Kingdom (company number 17334435, tavitavi.com). Privacy requests: privacy@yourideamatters.com. General contact: hello@yourideamatters.com.
What happens when you score an idea
- Your browser sends your sentence, and the options you picked, to our scorer on Cloudflare Pages Functions. Please don't include personal or confidential details in it.
- We pick a short search term from it (or use yours). We send only that search term from our server to Google autocomplete and the Hacker News search API (run by Algolia), and short name ideas built from it to the .com registry (Verisign RDAP). Your full sentence and your IP address are not sent to them. The search term can still reveal the gist of your idea to these services. They receive it as independent recipients under their own terms, not as our processors.
- If AI summaries are on, the full sentence and the collected signals go to Cloudflare Workers AI to write the summary. Cloudflare says it does not use Workers AI inputs or outputs to train models (source).
- We send the report back to your browser.
We don't collect data from Reddit or other forums. Reports only offer a link so you can search Reddit yourself.
What is kept, and for how long
- Your sentence is not stored. We don't log it, save it to a database or publish it.
- Short-lived cache (up to 6 hours). So that repeated identical requests don't re-query every source, the generated report is kept in Cloudflare's cache under a secret-keyed, one-way hash of the request. That report includes the search term and signals but not your original sentence. If AI summaries are on, the summary may paraphrase or quote parts of it. The public responses (search suggestions, stories, registry answers) are cached the same way. After at most 6 hours the entries expire. The cache can't be browsed, listed or fetched from outside.
- Rate-limit counters (up to 24 hours). To stop abuse we count requests per network using a salted hash of your IP address that changes every day. That hash is still pseudonymous personal data, so we keep it for at most 24 hours and only for abuse prevention. We never store the IP address itself.
- Cloudflare's own logs. As our host, Cloudflare processes technical request data (such as IP addresses) to deliver and protect the site, and keeps it under its privacy policy.
- In your browser. The report page keeps your last report in
sessionStorageso a reload doesn't lose it. The browser deletes it when you close the tab, and the report page has a button to clear it sooner. This storage is strictly necessary for the service you asked for, so no cookie consent is needed.
Why we may do this (lawful basis)
We rely on legitimate interests (UK GDPR and EU GDPR Article 6(1)(f)). Our interests are producing the report you ask for, and keeping the free tool available by preventing abuse (rate limiting). We keep the data needed for this to the minimum described above.
Processors and international transfers
Our processor is Cloudflare, Inc. (hosting, cache, Workers AI). Cloudflare is based in the United States, so data may be processed outside the UK and EEA. The transfer is covered by Cloudflare's Data Processing Addendum, which includes the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Cloudflare is also certified under the EU-US Data Privacy Framework and its UK Extension.
Analytics and bot checks
We may enable Cloudflare Web Analytics, which is cookie-free and gives aggregate page statistics. There are no advertising or social-media trackers. Fonts load from your own device.
Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to its processing (including processing based on legitimate interests), and to data portability where it applies. Because we don't keep your idea, and the only data linked to you is a daily hash kept for at most 24 hours, there is usually nothing we can find or return. Write to hello@yourideamatters.com and we'll answer within one month.
You can also complain to a supervisory authority. In the UK that's the Information Commissioner's Office (ico.org.uk/make-a-complaint, 0303 123 1113). In the EU it's the data protection authority where you live or work.
We make no automated decisions with legal or similarly significant effects about you. The score is information about your idea, not about you.
Changes
We'll update this page, and the date below, when anything changes.
Last updated: 28 September 2026.