Privacy Policy

The short version

The calculators and file tools run entirely in your browser. What you type into them, and the files you open with them, are never sent to us. We collect an email address only when you explicitly give one.

What never leaves your device

• Every value you enter into a calculator.
• Every image and PDF you open with the compressor or resizer. These are processed by your own browser; no upload happens at any point.
• Anything saved by a tool for convenience, such as UTM link history, which is stored in your browser only.

What we do collect

• Analytics. We run Google Tag Manager, which loads Google Analytics. It records which pages are visited, roughly where visitors come from, and which tools get used — whether a tool was used at all, whether a file was processed, a result copied or an error shown, and on which tool. It never records what you entered or anything about your files: not the numbers, not a file's name, not its contents. It also sets a cookie holding a randomly generated identifier so that repeat visits can be told apart. That identifier is never joined to your name or email address — we do not send either to it — but it is a cookie and it is persistent, so calling the data purely anonymous would be wrong. Used to decide what to build next. Decline and no cookie is set: Google still receives the request for the page, nothing is kept on your device, and one visit cannot be told from the next.
• Email addresses you submit. Only where you have entered one: to receive a site audit report, to sign up for the newsletter, or — optionally — so we can reply to a correction you report. Stored so we can send you what you asked for and follow up.
• Corrections you report. What you wrote, the page you wrote it about, and your email address if you gave one. We publish our formulas and ask you to check them, so this is the other half of that bargain.
• A newsletter record, if you sign up. Your address, where you signed up from, whether you have confirmed, and a single-use token that the confirmation link carries. You are on no list until you click that link: an address entered by mistake receives one confirmation, is never added to anything, and never hears from us again.
• URLs you submit to the SEO tools. These are fetched by our server, since that cannot be done from your browser. Audit results are cached for 24 hours so repeat checks do not re-crawl the site.
• A daily count of tool use, on our own server. When you use a tool, process a file, copy a result or see an error, we add one to that day's total for that tool. The total is a number and nothing else — no cookie, no identifier, nothing about you or your files — which is why it runs whether or not you accept analytics cookies. Kept indefinitely, since nothing in it is personal.
• A one-way hash of your IP address. Used to enforce rate limits on the SEO tools, and to stop one person inflating the usage count. The same hash is stored beside an audit request or a correction report, for the same reason. We store the hash, never the address itself — with one exception, named under sharing below. Your browser's user-agent string, which names the browser and operating system but not you, is stored with those two records as well.

Who we share it with

We do not sell data. Six processors run parts of the service, and this is the whole list and what each one gets.

• Hostinger runs the server these pages are served from, so every request passes through it, your IP address included.
• Neon hosts the database, so everything described above that is stored at all is stored there.
• Brevo sends the email: your audit report, a newsletter confirmation, and our own notifications. Anything we send you goes through Brevo, including that first confirmation. Only once you click it does your address join a list held there.
• Google receives analytics through Tag Manager, as described above. The SEO audit also sends the address you submitted to Google's PageSpeed Insights API, to fetch Core Web Vitals for it.
• Cloudflare runs the bot check. It loads on the SEO audit page, and on the newsletter sign-up only once you start filling the form in — never on a page where you are just reading. This is the exception named above: verifying the check sends your IP address to Cloudflare, as the address itself rather than a hash, because that is how the check works.
• Zoho holds our CRM, and a record reaches it only if you tick “I would like help fixing these issues” on the SEO audit. It carries your email address, your name if you gave one, the site you audited and a link to your report. Leave the box unticked and nothing is sent there at all.

How long we keep it

Cached audit results expire after 24 hours. When we email you a report, the copy behind that link is kept for 90 days, so the link still works when you come back to it; asking us to delete your details removes those reports with them. If you report a correction, what you wrote is kept for 12 months — long enough to fix the thing you told us about. Rate-limit records expire within the day. Contact details you send us are deleted automatically after 24 months, or sooner if you ask. A scheduled job removes everything past those limits — the dates above are not aspirations, they are what runs.

A newsletter sign-up you never confirmed is deleted after 30 days. It received one confirmation email and would receive nothing else, so past that it is an address we are holding for no reason — often a typo of somebody else's. A confirmed record is kept while you are on the list, and kept after you leave as well: a row that is gone cannot stop a later import from quietly putting you back on a list you chose to leave. That one has no end date. Ask us to delete your details and it goes too, along with the copies our processors hold — the Brevo list, and a Zoho record if you asked for help.

Your choices

You can ask us to delete anything we hold about you, or to send you a copy, by emailing cheekytools@krimsonhouse.com. No account is required to use any tool, and none of the calculators ask for personal information.

Children

The tools are general-purpose utilities and are not directed at children under 13.

Changes

If this policy changes in a way that affects what we collect, the date at the top of this page changes with it.