Privacy, in plain language.

Your calculations and prompts

The calculator, project-pricing, shipping, and custom-calculator engines process inputs in your browser. Ordinary calculations do not require sending those inputs to a calculation server. Ordinary calculations do not require an account. Optional account features are described below; cloud sharing requires a separate, explicit share action when enabled.

The guided prompt builder interprets supported patterns locally. It does not send your raw prompts to an external AI provider. Drafts, edits, and personal-review state can be saved on this device. Exporting a custom calculator creates a separate file containing the specification you choose to export.

This version does not collect payments or run advertising scripts or affiliate tracking. Optional Google Analytics runs only after you allow it with the analytics preference controls. The membership page shows proposed prices, with no active checkout.

What your browser remembers

UseCalculator uses local storage to keep useful state between visits. This data is associated with the site address and browser profile you use. The local workspace stays on this device. Signing in does not automatically upload its history or drafts; cloud saves use separate, explicit controls.

The original workspace keeps up to 100 history records and 100 saved calculations. The shipping workbench supports up to 20 saved profiles. Data remains until you remove it, clear site data, or your browser deletes it. Private browsing, storage restrictions, and browser cleanup can prevent persistence.

Local storage is not protected by a separate app password. Someone with access to your browser profile may be able to view local work. Another device, browser, or site address has separate local data.

Optional Google accounts and private cloud sets

Calculators and device workspaces work without sign-in. The Profile page shows whether Google sign-in is available on this deployment. If it is unavailable, private account features reject requests rather than accepting a client-supplied identity.

During the limited pilot, only the approved Google account can establish a session. If you choose Google sign-in, the requested permissions are only basic identity: OpenID, email and profile. We use Google's verified identity identifier, email address and display name to create and recognize your account. Google handles its own sign-in and consent screens. We do not request Gmail, Drive, contacts, offline access or other Google API permissions. Google profile pictures and OAuth access, refresh and ID tokens are not retained by this app.

Your signed-in session uses an opaque cookie marked Secure, HttpOnly and SameSite=Lax, plus temporary cookies that protect the sign-in flow. Only a hash of the session token is stored in our database. A session lasts at most 24 hours; reading it does not extend that limit. Signing out revokes the current session. Other devices' sessions are separate, and signing out here does not sign you out of Google.

Cloud sets are saved only when you select Save private set while signed in. Their titles, descriptions, context, selected tools, notes, inputs, results and saved versions are stored under your account. A private profile stores the display name and local-avatar specification you explicitly save. Ordinary device history is not automatically copied into either record. Legacy account identifiers or email addresses from another deployment are not used to claim its records.

Account, linked-identity and profile records do not expire automatically in this release. Session expiry stops access; expired session records may remain until cleanup. Cloud sets and saved versions remain until you delete the set from its controls. No automatic account-retention schedule or account-deletion screen is provided. Existing backups may retain earlier copies; this release does not promise a backup-erasure deadline.

Two kinds of share link

Basic calculator and shipment links contain the inputs needed to recreate a calculation. Their values are encoded in the URL; encoding is not encryption. Anyone who can open the link and site can read the included data. These links are not revocable. Deleting the local record does not remove a copy from a recipient, bookmark, or message. Query-string inputs may appear in browser history and infrastructure logs.

Cloud-set snapshots, where enabled, require an explicit share action. Preview the selected version before sharing. Anyone with its active link can read the included inputs and results until expiry or revocation. Previously issued links on another deployment are not migrated here.

CSV and JSON exports are downloaded to your device. You control where those files go afterward. An export is independent of local storage, cloud revisions, and share-link expiry.

Keep a copy. Clear what you need.

1. Export your work. Use the export controls in My workspace, calculator sets, the builder, or the project and shipping workbenches. Exports are separate files you control.
2. Manage local records. Delete saved calculations, clear local history, remove a favorite, or delete a shipping profile with its controls. Your browser's site-data settings can remove local data for this address, including preferences and drafts. This does not delete cloud records.
3. Manage a private cloud set. When signed in, you can export it, archive or restore it, or permanently delete the set and its saved versions using the name-confirmation control. Archiving keeps records; deleting removes their active database records. Backups and exported copies are separate.
4. Manage your profile and session. Save profile updates your private display name and avatar. Sign out revokes this device's current session without deleting your profile, cloud sets or Google account. This release has no self-service account/profile deletion or sign-out-all-devices control.
5. Records on another deployment. This release does not migrate, delete, or offer controls for those records.

Local records cannot be recovered by the app after their local storage is removed. Exported files, clipboard contents, and copies of shared links must be managed separately.

Loading the site and connected services

The approved billing pilot uses clearly labeled Stripe test checkout. No real payment is collected. Starting that test checkout sends the selected plan to our server and creates a test customer and checkout at Stripe. The server stores environment-separated customer and subscription identifiers, verified access status and processed event identifiers. Card details are entered on Stripe, not stored by this app. The customer portal connects to Stripe to show test invoices and cancellation controls.

Delivering the website involves network requests. Choosing Google sign-in also connects you to Google; choosing a cloud save sends that set to this service. The hosting, database, and content-delivery infrastructure may process request information such as IP addresses, browser details, requested URLs, and times for delivery, security, and operation. Basic share-link inputs included in a requested URL may appear in those records.

The app serves its fonts with the site; it does not request fonts from a third-party font service. Links to external reference sites open services with their own privacy practices. Embedded calculators run inside the page where they are placed; that surrounding website can have its own cookies, analytics, and data practices.

Commercial proposals do not activate services. If external AI processing, additional analytics, ads, affiliates, or payment services are introduced, their actual data flows and controls need to be reflected here before use.

Optional analytics and avatars

Google Analytics is off until you allow it. If allowed, Google receives reviewed public page paths, fixed calculator and navigation identifiers, search result-count buckets and numeric performance measurements, along with network metadata such as IP address, browser details and times. We do not send calculation inputs or outputs, typed search words, names, emails, account IDs, URL queries, URL fragments or referring-page URLs. Search events contain only a fixed filter, a match type, a result-count bucket and, when a result is chosen, its public destination identifier and position. Performance events contain only metric name, rounded value, unit and rating; no DOM text, element selectors or attribution objects are sent. Known acquisition sources and three published campaign names are reduced to fixed labels. Arbitrary campaign text and referring domains are excluded. Enhanced measurement, Google Signals, advertising personalization and user-ID tracking are not enabled.

Your analytics choice is remembered in local storage. The expanded UX and performance measurement needs fresh consent if you previously allowed the narrower page-and-calculator measurement; a previous rejection remains respected. Consented Google Analytics cookies can last up to 90 days. Use Analytics preferences in the footer to reject or withdraw consent; withdrawal disables later collection and removes this site’s Google Analytics cookies. It cannot retract requests already sent. Browser storage restrictions may make a choice apply only to the current visit.

Avatar previews are generated locally with DiceBear using random opaque seeds and allowlisted CC0 styles. No email-derived seed, remote avatar image request or avatar upload is used. Previewing or changing an avatar does not save it to an account. When signed in, Save profile stores your chosen style, random seed, background and display name in your private profile.

Google privacy policy · Profile and avatar options

When this page changes

This page describes the product’s current storage and sharing behavior. If those capabilities or data collection change, this page should change with them. The date above identifies the latest revision.