OpenClaw for Android – andClaw

"We may modify this Privacy Policy at any time, without prior notice, and changes may apply to any personal data we hold about you, as well as any new personal data collected after the Privacy Policy is modified. Your continued use or revisitation of the Site or the Service following the posting or notice of a revised Privacy Policy means that you accept and agree to the changes."

OpenRouter reserves the right to modify the privacy policy at any time without prior notice, and treats continued use as acceptance of the new terms. While they mention email notice for "material changes" to account holders, the baseline policy allows changes without any notice.

"Affiliates and Corporate Partners. We may share your personal data with our subsidiaries, affiliates, and partners. We may also use Tracking Technologies to collect 'clickstream' data, such as the domain name of the service providing you with Internet access, your device type, IP address... In collecting clickstream data, we use PostHog, a web and products analytics platform that may also utilize session replay features."

OpenRouter shares personal data with affiliates and partners without specifying who they are or limiting the purposes. They also use Google Analytics, PostHog (with session replay), web beacons, and other tracking technologies that collect data directly from users' devices.

"We use first-party and third-party cookies for the following purposes: to collect information about your activities over time and across third party websites or other online services in order to deliver content tailored to your interests. We may also use Tracking Technologies to collect 'clickstream' data, such as the domain name of the service providing you with Internet access, your device type, IP address... and assign unique identifiers to the device or other credentials you use to access the Site."

OpenRouter explicitly collects data about user activities across third-party websites and assigns unique device identifiers, enabling cross-site tracking and profiling.

"Details of your visits to our Site, including, but not limited to, traffic data, location data, log files to understand how our Service is performing. Geolocation data, such as the general area from which your device accesses our Service based on information like its IP address, or precise location information you choose to provide."

OpenRouter collects location data including IP-based geolocation and mentions collecting "precise location information" if provided, going beyond what's needed for an AI routing service.

"We are subject to applicable laws on the retention of information and will retain your information for as long as is reasonably necessary to comply with our business and legal obligations and to meet regulatory and compliance requirements. When your account is deleted, all associated personal data is deleted, unless we are required to maintain it for regulatory and compliance purposes or for a legal or business necessity."

No specific retention periods are defined. Data is kept for as long as "reasonably necessary" for broad business purposes, and even after account deletion, data may be retained for undefined "business necessity."

"If you no longer wish to use our Service, or no longer wish to have your personal data be processed, you may request to delete your account and the information in your account, subject to certain limitations, by emailing us at [email protected]. Once you submit your request, we will send an email to the email address linked to your account requesting that you confirm your deletion request."

Account deletion requires emailing support rather than offering a self-service option. The multi-step email confirmation process adds friction, and data may still be retained after deletion for vague "business necessity" reasons.

"Information about your computer and internet connection, including your IP address, operating system and browser type, time zone setting, and other unique personal or online identifiers. We may also use Tracking Technologies to collect 'clickstream' data, such as the domain name of the service providing you with Internet access, your device type, IP address... and assign unique identifiers to the device."

OpenRouter collects extensive device information including OS, browser type, time zone, ISP domain name, and assigns unique device identifiers — more than what's necessary for an API routing service.