Privacy Policy

1. What we collect

We collect only what the Service needs to work:

• Account data — your name, email address and a hashed password. If you sign in with Google or GitHub, we receive the basic profile they return (provider id, name, email, avatar URL); we never receive your password for those accounts.
• Calculator inputs — any text you paste into the calculator (we use it to count tokens and only retain it as long as your session is active), any feedback you send us, and any avatar image you upload.
• Billing data — payments are processed by Stripe. We store your Stripe customer and subscription identifiers, plan, status and renewal date. We never see or store full card numbers.
• Technical data — IP address, user agent and timestamps in server logs, kept briefly for security and debugging, plus cookieless Cloudflare Web Analytics (aggregate page views, no cross-site tracking and no advertising profiles).
• Cookies — a session cookie to keep you signed in, and preference cookies for language and theme. We do not use advertising cookies.

2. How we use it

We use your data to provide and maintain the Service, count tokens, process payments, and send transactional email (verification, password reset, plan changes) through Resend. We also use it to protect the Service against fraud and abuse — public forms are protected by Cloudflare Turnstile — and to understand aggregate usage so we can improve the product.

Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (providing the Service and billing), our legitimate interests (security, abuse prevention, product improvement), your consent where we ask for it, and compliance with legal obligations (tax and accounting records).

We do not use your inputs to build advertising profiles, and we do not sell them.

3. AI features

The calculator itself runs without sending your text to any LLM — token counting happens in your browser (OpenAI family) or via a local heuristic (everyone else).

Where AI-assisted features are added in the future, the relevant input will be sent to our third-party provider so it can produce a response. Nothing is sent unless you trigger an AI feature, and we will document each one in this policy.

We do not train our own models on your inputs, and we do not sell them.

4. Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share data only with service providers who process it on our behalf, under contract:

• Cloudflare — hosting, database (D1), file storage (R2), caching (KV), Web Analytics and Turnstile;
• Stripe — payment processing and subscription management;
• Resend — transactional email delivery;
• our AI provider — processing the text you submit to AI features, if and when you trigger them;
• Sentry — error reports, if enabled for the deployment you use.

5. Retention, security and international transfers

We keep your account for as long as your account is active. When you delete your account, your saved inputs and uploaded files are removed from live systems within 30 days and from backups within 90 days. Billing and tax records are retained for as long as the law requires — typically seven years.

We protect your data with encryption in transit, hashed passwords, scoped access to production systems, and regular dependency updates. No online service can promise perfect security, but we will notify you and the relevant authorities of a breach where the law requires it.

The Service runs on Cloudflare’s global network, so your data may be processed in the United States and other countries. Where personal data leaves the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum.

6. Your rights and choices

You can view and correct your profile, change your password, and permanently delete your account and its data from Account settings at any time.

If you are in the EEA or the UK, you also have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority. If you are in California, you have the right to know, delete and correct your personal information, to opt out of its sale or sharing (we do neither), and not to be discriminated against for exercising those rights.

To exercise any of these rights, email hello@tokencalculator.com. We will respond within 30 days, and we may need to verify your identity first.

The Service is not intended for children under 13. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy. Material changes will be announced by email or in the app before they take effect, and the date at the top of this page always reflects the current version.