Privacy Policy

Calccura ("we", "us" or "our") operates the website at https://calccura.com. We are the data controller for the purposes of the UK GDPR, EU GDPR and the Data Protection Act 2018.

For postal correspondence or service of legal documents please email first — a postal address will be provided within 48 hours on request.

We built Calccura on the idea that calculators should not require personal data.

• Data minimisation: we only process data we actually need.
• Lawfulness: processing is covered by legitimate interests or your consent.
• Integrity: we never sell your personal data.
• Transparency: everything we do is described below.

All calculators run locally in your browser. Numbers you type — salary, height, loan amount, etc. — are never sent to our servers, never logged, never stored. The "Share result" feature encodes values into the URL hash; the numbers never leave your device unless you send the link.

When you visit Calccura, standard server-level access logs may record:

• Anonymised IP address (truncated, if supported by our hosting provider)
• Referring website / exit pages
• Browser user agent & device type
• Pages viewed, duration, broad geolocation (country/region level)
• Date and time of access

This is used purely to detect abuse, fix bugs, and estimate traffic volumes. We do not combine this information with other datasets to identify individual users.

A user account is only needed for admins who write blog posts or manage saved calculations. Accounts are created via Supabase. When you sign up we store:

• Email address
• A one-way cryptographically hashed password (we never store the plaintext)
• Role (admin / user) as stored in the user_roles table
• Any blog posts or saved calculations you create

You can delete your account at any time by emailing us.

We only use functional first-party storage:

• Local storage only — your theme preference (light/dark) as a key/value pair in browser localStorage.
• We do not set tracking, advertising, analytics or personalisation cookies of our own.

Third parties described in Section 7 may set their own cookies when you use this site. See our Cookie Policy for the full list.

Google AdSense (advertising)

We display ads through Google AdSense to fund the site. Google (and its advertising partners) may use cookies and device identifiers to:

• Personalise the ads you see on this site and elsewhere
• Track ad impressions, clicks, conversions, and for fraud prevention
• Run frequency capping and measurement

You can opt out of personalised advertising at google.com/settings/ads or via youronlinechoices.com (EU) or Google Analytics opt-out. For non-personalised ads, Google still performs measurement and frequency capping.

Supabase (hosting backend)

Auth, database and storage for admin/blog features are run on Supabase (Supabase Inc., USA). Data is processed under their Standard Contractual Clauses.

Fonts & CDNs

We load the Inter typeface from Google Fonts and the Recharts library from public CDNs. These providers may see your IP address per their standard privacy policies.

• Legitimate interests: running ads to keep the site free (Art. 6(1)(f)), server security & abuse detection.
• Consent: any cookies or storage not strictly necessary is only placed after consent (where required by the ePrivacy Directive / GDPR).
• Contract: if you create an account, Art. 6(1)(b) applies.

You have the right to:

• Request a copy of any personal data we hold about you
• Request correction or deletion of your data
• Restrict or object to processing
• Data portability (for data you provided)
• Withdraw any consent you previously gave
• (California residents) opt-out of "sales" — we do not sell data.

To exercise any of these rights, email morsecoders.dev@gmail.com. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (e.g. the UK ICO).

• Server access logs — 30 days
• Admin/blog user accounts — until deletion request
• Blog posts — for as long as the post is published
• Local storage — until you clear it in your browser

This section summarises your rights and our processing obligations under the EU GDPR (for EEA users) and UK GDPR (for UK users).

• Categories of personal data processed: anonymised server logs (IP, UA, referrer — see §4), optional account data (email, hashed password, profile, role — see §5), any data you choose to save as calculations or blog comments.
• Categories of recipients: Supabase (auth + DB, USA — SCCs), Google AdSense partners (advertising, USA / global — consent-based), Google Fonts (font delivery, USA — legitimate interests).
• Retention periods: see §10.
• Existence of automated decision-making / profiling: we do NOT carry out any automated decision-making or profiling that produces legal or similarly significant effects.
• Right to lodge a complaint: you may complain to the ICO (UK) or your local DPA (EEA) at any time — contact details below.

For users located in the European Economic Area (EEA): Calccura is established in the United Kingdom. The UK has adequacy status under the EU GDPR, and as a UK-based controller processing EEA residents' data we designate our data protection contact as our representative for EEA matters.

Your data may be processed in countries outside of the UK / EEA, including the United States, where some of our vendors operate. Transfers are covered by:

• UK GDPR European Data Transfer Addendum / UK International Data Transfer Agreement for transfers to the US where applicable.
• EU Standard Contractual Clauses (SCCs) 2021/914 for EU→US transfers via our vendors (Supabase, Google).
• Google AdSense participation in the Privacy Shield Framework replacement and Google Ads Data Processing Terms.

This section is a summary. Our full list of cookies, their purpose, duration, and opt-out methods is set out in our Cookie Policy, which forms an integral part of this Privacy Policy.

• Only one first-party key is set (theme preference in localStorage — strictly functional, no tracking).
• Third-party cookies from Google AdSense, Supabase, and Google Fonts — details in the Cookie Policy.
• No server-side tracking, no analytics cookies placed by Calccura directly.

See §9 for your rights. In addition, this section sets out contact details and how we respond.

• Requests via email to morsecoders.dev@gmail.com (preferred) or any contact method on the Contact page.
• Response time: within 30 days of receipt. We may extend by a further 60 days for complex or voluminous requests — you will be notified within the first month.
• No fee for the first request per 12-month period. We may charge a reasonable administrative fee for manifestly unfounded, repetitive, or excessive follow-up requests.
• Identity verification: we may request reasonable proof of identity before disclosing personal data, to prevent unauthorised access.

Calccura is intended for users aged 16+. We do not knowingly collect information from children under 16. If you believe a child has provided us with personal data, please contact us.

We may update this Privacy Policy. The "Last updated" date at the top shows when it was last revised. Material changes will be mentioned on the homepage with a prominent notice for 30 days, and (where you have an account) by email to the address held on file.

If you are dissatisfied with our response to a privacy request, or believe our processing is unlawful, you may contact our lead supervisory authority:

EEA users may also contact their local data protection authority.

For all privacy and data-protection matters write to the Data Protection Officer at morsecoders.dev@gmail.com. For general enquiries use morsecoders.dev@gmail.com. We reply personally to every message.