OpenRouter does not offer private inference, so your plaintext is shared with companies you may not even know by name.
Tinfoil OTOH claims hardware attestation and confidential computing, which is a pretty strong and (in theory) verifiable promise.
You absolutely would not recommend tinfoil.sh to someone indifferent to privacy trying to save money.
It's a very different service than OpenRouter.