Draft notice. The operator’s identity, direct privacy contact, and location must be confirmed before publication. This describes the current application; it is not a certification of legal compliance.
You can use the editor without an account. Signing in lets you store multiple calculators and quote snapshots on this server. Calculator settings autosave in this browser. The Ko-fi widget remains optional.
1. Who runs this website
This website is operated by the CommissionCalc website operator. In these notices, “we”, “us”, and “our” refer to that operator.
Public contact: Lawrence’s Ko-fi profile (a direct privacy email is awaiting confirmation).
This policy covers this CommissionCalc website. Makers who publish calculators on their own websites are responsible for their own notices, hosting, and customer information.
2. Calculator settings and answers
Titles, option names, rates, themes, pricing rules, selections, quantities, and estimates are initially processed on your device. Project imports are read in your browser. When you explicitly save to your account, calculator settings are sent to this server; saving a quote also sends its selections and stores the calculated price breakdown. Saving an item does not publish it. The application does not provide commission submissions or payment processing.
Your current calculator settings automatically save in this browser’s local storage while you use the editor. Customer answers are not included in this browser draft; they are uploaded only when you explicitly save a quote. Saved drafts are restored when you return to the editor, and new edits autosave. See the Cookies & storage notice for the keys and controls.
Copy buttons write to your clipboard only when used. When copying is unavailable, the estimate can be downloaded as a text file. Project and HTML downloads stay wherever you save them. Imported contents stay on your device until you explicitly save them to an account.
Accounts and your private library
Creating an account sends your chosen username and password to this server. We store the username, a salted scrypt password hash, a hash of your recovery code, your creation time, and the version of the terms accepted at registration. We do not collect an email address. The password and recovery code are not stored in readable form. Keep your recovery code private; it can reset your password and is replaced after recovery or a password change.
We also store random session-token hashes, anti-forgery tokens, and session expiry times to keep you signed in and protect account actions. A necessary, first-party HttpOnly session cookie lasts up to seven days. Signing out invalidates that session. Changing or recovering your password invalidates other sessions.
Your library stores the names, calculator settings, quote selections and calculated estimates you choose to save, plus item identifiers, versions, and creation/update times. The operator and authorized hosting administrators can access the underlying database to operate the service; it is not end-to-end encrypted. Use neutral quote references and avoid sensitive customer information. Accounts can store up to 200 library items.
The application keeps hashed rate-limit keys based on connection addresses, usernames, or account identifiers, with request counts and expiry times, to limit abuse. These are cleaned after expiry, up to one hour for registration limits and usually 15 minutes for other limits. No third-party identity, email, analytics, or advertising provider is used for sign-in.
4. Hosting and connection information
The Railway deployment receives information needed to deliver the website, including IP address, request time, requested path, browser or user-agent information, response status, and related connection metadata. Railway can make HTTP logs available to the site operator. We use operational information to deliver the service, diagnose faults, and protect it from misuse.
The supplied application does not write visitor access logs of its own, install analytics or advertising tools, or forward logs to another analytics service. Railway’s own infrastructure and security processing still apply. Its Privacy policy and log documentation describe its services and plan-dependent log visibility.
The site’s font and animation library are served locally. Loading a page does not require a connection to Google Fonts.
5. Ko-fi and optional support
The ordinary support link opens Lawrence’s Ko-fi page only when you follow it. If you separately enable the widget in Privacy choices, your browser requests Ko-fi’s script and related resources. Ko-fi then receives connection information and applies its own privacy and storage practices.
The widget runs in an isolated frame without access to this website’s local storage or calculator editor. Switching it off removes that frame and stops further widget activity from it. This cannot undo information already sent. Calculator-only links do not load the widget. Read Ko-fi’s privacy policy before enabling it or making a payment.
Ko-fi and its payment providers handle support payments. They may make supporter contact details, messages, and transaction information available to the creator. That creator uses relevant records to handle support, payment questions, and legal or accounting obligations. Contact the creator about information they receive; this calculator does not collect card details.
6. Messages and assistant tools
If you contact the operator, the recipient receives the contact details and message you choose to send. These are used to answer your enquiry, resolve a complaint, or handle a rights request. Email and messaging providers process those communications under their own arrangements. No contact form or mailing list is built into this version.
Compatible browsers or assistants may expose tools to read the calculator settings and current preview, or apply a theme. Using those tools can make that information available to your chosen assistant. Review the assistant’s permissions and privacy policy. Ordinary calculator use does not send a request to an AI service.
7. Purposes, recipients, and international processing
Where a law requires a legal basis, we rely on performance of the requested account service for account registration, sign-in, and library storage, legitimate interests in operating and securing the website and responding to enquiries, consent for the optional external widget, and applicable legal obligations for records we must retain. Browser autosave keeps your working calculator settings on this device. You can clear the saved draft through Privacy choices or your browser’s site-data settings. Mandatory rights under applicable law are preserved.
Relevant recipients can include the hosting provider, communication or payment providers you use, the support-page creator, and authorities or professional advisers where disclosure is legally required or necessary to resolve a matter. We do not sell calculator settings or use them for targeted advertising.
Railway, Ko-fi, and their providers can process information outside your country. Railway identifies the United States, the Netherlands, Singapore, and other selected hosting locations in its privacy policy. Ko-fi is based in the United Kingdom and also uses international providers. Contact the operator for details of the deployment and any transfer safeguards that apply to information under the operator’s control.
8. Retention and security
An autosaved draft remains on this device until you replace or clear it, clear browser data, or your browser deletes it. Privacy choices remain until changed or cleared; permission for the optional widget expires after 180 days. Browsers may remove local data sooner. Downloaded files and shared copies remain under the control of whoever keeps them.
Account information and saved library items remain until you delete the item or your account. Deletion removes them from the active database and invalidates account sessions; dormant accounts are not automatically deleted by this version. Expired sessions are rejected immediately and removed during subsequent use. Hosting backups or storage remnants can retain earlier copies until overwritten or the configured backup retention ends. Contact the operator for the actual backup schedule and deletion handling; deleting from the active database does not immediately erase independent provider backups.
Railway’s visible log retention depends on the hosting plan; current provider documentation lists periods from 3 to 90 days. Provider security or backup processing may follow separate retention rules. This application does not configure an external log drain. Contact the operator for the actual hosting plan and any records retained separately for an incident.
Enquiry records are kept only as long as reasonably needed to answer and resolve the matter, including necessary complaint or legal records. Payment records are kept for applicable accounting, tax, and dispute requirements. The applicable requirements depend on the operator’s location and transaction.
Passwords use salted scrypt hashes, sign-in sessions expire, account actions use origin and anti-forgery checks, and saved items are restricted to their owner. Production deployments require HTTPS. Local drafts and the stored library database are not encrypted by this application; hosting storage protections depend on the deployment. Anyone with access to your browser profile may be able to see them. Use trusted devices, keep backups, and avoid storing sensitive information in the calculator. No storage or transmission method can be guaranteed completely secure.
9. Your choices, rights, and complaints
You can use to enable or withdraw widget permission, clear this site’s browser draft and privacy choices. Browser site-data controls provide another way to delete local storage. Clearing those choices does not sign you out or delete your account, saved library, downloaded files, another person’s copies, or records held by Ko-fi or the hosting provider. In the editor, Account settings offers sign-out, a download of your account data and library, password changes, and account deletion with password confirmation. You can rename, download, or delete individual library items.
Depending on the law that applies, you may request access, correction, deletion, restriction, portability, or object to certain processing of information held about you. You may withdraw consent without changing the lawfulness of processing before withdrawal. Contact Lawrence’s Ko-fi profile (a direct privacy email is awaiting confirmation); describe the request and provide enough information to identify the relevant record. We may need proportionate identity checks and will respond within the time required by applicable law.
We cannot retrieve or remotely erase a draft stored only on your device. We do not require an account to exercise privacy choices. You may also complain to the privacy regulator that applies to you, such as the OAIC in Australia, the ICO in the United Kingdom, or your local data protection authority.
10. Changes to this notice
Material changes to data handling should be reflected here before they take effect. Updated notices show a new effective date. A new purpose for an optional integration requires a new choice where consent is required; a change to these terms or this notice does not itself grant that consent.