1. What we collect
a. Visit analytics (no cookies)
Page path, display language, referring domain, country code, device type and time on page. To count unique visitors we store only a 16-character hash of IP address + user agent + the current date + a server secret. The raw IP address is never stored. Because the date is part of the hash, it changes daily and cannot be linked to earlier visits. The value cannot identify an individual.
b. Email (optional)
Only if you request price-change alerts. We store your address and the models you follow. Subscription starts only after you click the confirmation link (double opt-in), and every message carries an unsubscribe link in both the body and the List-Unsubscribe header.
c. Estimator inputs
We anonymously collect the numeric assumptions you edit (monthly volume, context length and so on) and one-line descriptions that failed to match a scenario. Used solely to improve our defaults.
d. What we do not collect
Prompts you paste into the calculator are never sent to our servers. All of that runs in your browser. We use no cookies, no advertising identifiers and no cross-site tracking.
2. Purpose
Service improvement, error diagnosis, correcting estimator defaults, and sending alerts you asked for. We do not sell data.
3. Retention
- Detailed visit analytics: 90 days, after which only daily totals remain
- Email: deactivated immediately on unsubscribe, then deleted
- Estimator assumptions: retained only as anonymous aggregates
- Unmatched descriptions: 180 days
4. Processors and international transfer
- Cloudflare, Inc. — hosting and storage (D1/R2/KV). The database is located in the Asia-Pacific (Seoul) region.
- Resend — alert email delivery. Only the email address is shared.
- If advertising is shown, Google AdSense may be used and Google's own privacy policy applies in addition.
5. Your rights
You may request access, rectification, erasure or restriction. Email deletion is immediate via the unsubscribe link in any alert. Other requests go to the contact below and are handled within 30 days.
If you are in the EU/EEA, you may exercise your GDPR rights of access, rectification, erasure, portability, restriction and objection. Our lawful basis for visit analytics is legitimate interest (operating and improving the service); email delivery is based on consent. You may also lodge a complaint with your local supervisory authority.
6. Contact
privacy@tokendeck.app