Privacy policy
This is a calculator site. The only personal data it holds is an email address you explicitly give it, and even that is optional — every calculator works fully without it.
What is collected, and why
| Data | When | Why | Stored as |
|---|---|---|---|
| Email address | Only if you submit the rate-alert form | To send one-line alerts when an Etsy fee rate changes. Nothing else — no newsletter, no marketing | Plain text, with a random confirmation token and unsubscribe token |
| IP address | On every API request | Rate limiting, to stop one machine flooding the subscription endpoint | SHA-256 hash with a fixed salt. The raw IP is never written to the database. Because the salt is fixed (not a per-row secret), the hash is pseudonymisation, not irreversible anonymisation — an IP space sweep could in principle be matched against it. It is used only for rate limiting and never linked to your identity. |
| Country | On subscribe, if provided by Cloudflare | Aggregate only — to know which countries' rates matter most to readers | Two-letter country code or empty |
| Page path | On subscribe | To know which tool page the signup came from | URL path, truncated to 120 characters |
| Timestamps | On subscribe / confirm / unsubscribe | Audit trail of consent | Dates |
What is not collected
- No tracking cookies. The site sets none. The calculators run entirely in your browser.
- No advertising identifiers, no cross-site profiles, no analytics that follow you. Aggregate, cookieless page-view counts may be collected via Cloudflare Web Analytics, which does not fingerprint visitors.
- No calculator inputs. What you type into a calculator never leaves your browser. There is no server-side record of prices, costs, or results.
- No account system. There is nothing to log into.
Double opt-in
Submitting the form does not subscribe you. A confirmation email is sent first; only clicking that link activates the subscription. If you received a confirmation email you did not ask for, ignore it — nothing will be sent, and no record of an active subscription will exist.
Third parties
| Provider | Role | What they see |
|---|---|---|
| Cloudflare | Site hosting, database (D1), API | Requests as any web host does. See Cloudflare's own privacy policy for their network-level processing |
| Resend | Email delivery | Your email address and the alert emails, only when email sending is active |
If advertising is added later, this page will be updated first, and any consent mechanism required in your region will be added with it — not after.
Retention and deletion
A subscription is kept until you unsubscribe. Unsubscribing is one click via the link in every email, or the unsubscribe endpoint. If you want your address deleted outright rather than marked unsubscribed, email tslatoken@gmail.com and it will be removed. Hashed IP rate-limit rows are short-lived by design.
Your rights
Regardless of where you are: you can ask what is stored about you, ask for a copy, or ask for deletion. Email tslatoken@gmail.com — requests get a straight answer, not a form.
Changes to this policy
If data collection ever changes — new fields, new providers, advertising — this page changes first and the date below moves. Material changes to an active subscription list would be emailed to that list.