Privacy policy
costsimulators.com is built to work without collecting anything about you. This page explains the little data that is involved in delivering the site and who handles it.
In short
- All calculations run locally in your browser. The numbers you enter are never sent to a server by the tools.
- No accounts, no analytics, no advertising, no tracking pixels and no third-party scripts.
- The site sets no cookies. The only things stored on your device are your theme and language choices.
- The site is hosted on Cloudflare, which processes basic technical request data to deliver and protect it.
1. Who is responsible
The controller for personal data processed in connection with this website is:
Timo HeimonenEmail: timo.heimonen@proton.me
costsimulators.com is a free service maintained by one person as an independent project.
2. What stays on your device
Every calculator on the site runs entirely in your browser using JavaScript. Values you enter, such as hourly rates, number of participants, prices or quantities, are processed only on your device and are not transmitted to, stored on or logged by any server run for this site.
To remember whether you prefer the light or dark theme, the site saves a single value (costsimulators-theme) in your browser's local storage. It contains only the word light or dark. If you pick a language from the language menu, the site also saves that choice (costsimulators-lang, for example en-GB) so that it can open the site in your language next time. These values are never sent anywhere, and you can remove them at any time by clearing your browser's site data.
Some features use capabilities built into your browser: copying a link to your clipboard, opening your device's share sheet, and keeping the screen awake while a meeting timer runs. These all happen locally and only when you use them.
3. Shareable links
Tool settings are kept in the page address so that you can bookmark or share a calculation. When you open such a link, the values in it are part of the web address your browser requests, and they may therefore appear in the technical request data described below. If you share a link, anyone you share it with can see those values. Avoid putting anything you consider confidential into a shared link.
4. Hosting and technical data (Cloudflare)
The site is hosted and delivered by Cloudflare, Inc. (Cloudflare Workers and its content delivery network). Whenever your browser loads a page, Cloudflare necessarily receives standard technical information about the request, which may include:
- your IP address and approximate location derived from it,
- the requested address, date and time,
- browser and operating system information (user agent), referring page and similar request headers.
This data is used only to deliver the site, keep it secure and reliable, protect it against abuse and attacks, and diagnose technical errors. Request logs are kept for a short period, typically only a few days, and are not used to build profiles of visitors, combined with other data or used for marketing.
To protect the site, Cloudflare may in some cases set a strictly necessary security cookie, for example when it needs to distinguish between people and automated traffic. The site itself does not set any cookies.
Cloudflare acts as a data processor on behalf of the site. More information is available in the Cloudflare privacy policy.
5. If you get in touch
If you contact me by email, I will use your email address and the contents of your message only to reply to you and handle your request. Messages are kept only as long as needed for that purpose and are then deleted.
The site links to GitHub for source code and tool suggestions. GitHub is a separate service with its own privacy statement, which applies once you follow those links.
6. Legal basis
Technical request data is processed on the basis of legitimate interest (Article 6(1)(f) of the EU General Data Protection Regulation): delivering a working and secure website requires it. Email correspondence is processed on the same basis, in order to respond to you. Storing the theme and language choices in your browser is strictly necessary to provide a feature you asked for.
7. Transfers outside the EU
Cloudflare operates a global network and is based in the United States, so technical request data may be processed outside the European Economic Area. Cloudflare participates in the EU–U.S. Data Privacy Framework and also relies on the European Commission's Standard Contractual Clauses to safeguard such transfers.
8. Your rights
Under the GDPR you have the right to request access to, correction of and deletion of your personal data, to restrict or object to its processing, and to data portability where applicable. Because the site does not identify visitors, there is usually no data that can be linked to you, but you are welcome to ask by writing to timo.heimonen@proton.me.
You also have the right to lodge a complaint with a data protection supervisory authority. In Finland this is the Data Protection Ombudsman; you may also contact the authority in your own country, which in the UK is the Information Commissioner’s Office (ICO).
9. Children
The site is suitable for everyone and does not knowingly collect personal data from anyone, including children.
10. Changes to this policy
If the way the site handles data changes, this page will be updated and the date at the top will change. Significant changes will be reflected here before they take effect.
See also the terms of use.