Privacy policy

The short version

The determination tool on the home page runs entirely in your browser. Your project figures are not sent to us, not logged and not stored. We run no analytics and set no cookies. If you subscribe, Stripe handles your payment details and we never see your card.

The determination tool

The engine is compiled into the page and executes on your device. The state, district, activity and impact figures you type stay in the browser tab and are gone when you close it. No request carrying them is made to our servers, so there is nothing for us to retain.

The API and the MCP server

When you call the API we necessarily receive the request in order to answer it. We do not write it to a database, because there is no database: determinations are computed and returned. We keep a counter of how many calls a key has made in the current window so that rate limits mean something. That counter lives in the memory of the server instance handling your request and is lost when the instance stops. It holds a count and a reset time against a key identifier, not the contents of your requests.

Our hosting provider, Vercel, processes requests on our behalf and keeps operational logs, which is ordinary infrastructure logging rather than anything we have built.

Payments

Subscriptions are handled by Stripe. You enter your card details on Stripe's systems, not ours, and we never receive or store them. From Stripe we learn that a subscription exists and whether it is active, which is what the API checks when it decides whether your key is on the Pro tier. Stripe's own privacy notice governs what they collect.

Your API key

A Pro key is derived from your Stripe subscription identifier by signing it. We do not keep a copy: it is recomputed from the subscription whenever it is checked. That is why cancelling your subscription is enough to stop the key working, and why there is no store of keys to leak.

What we do not do

• No analytics, no tracking pixels, no session recording.
• No cookies, so there is no cookie banner to dismiss.
• No advertising and no sale or sharing of data with advertisers.
• No accounts, so there is no profile to build.

Your rights

Because we hold no personal data beyond what Stripe holds for your subscription, a request to see or delete your data is in practice a request to Stripe. Cancelling your subscription ends our relationship entirely. If you want to ask us anything about this, use the contact address below.

Contact

Email maxedbeech@gmail.com. See also the terms of service.