Privacy Policy & Client-Side Sandbox Guarantee
Last Updated: October 1, 2026. At CheckAPICost, privacy is not merely a policy—it is engineered into our computational architecture. All calculations execute 100% locally in your browser.
1. The Client-Side Computational Sandbox
When you use our cost calculators, token simulators, compound pipeline composers, or comparison matrices, every arithmetic calculation runs entirely inside your client browser via local JavaScript.
What this means for you:
- Your token volume projections, prompt lengths, and API usage estimates are computed entirely in browser memory.
- We never send, log, or store your architectural configurations, query counts, or budget numbers on remote application servers.
- You can audit our calculators in your browser's Developer Tools Network tab: zero network payloads are dispatched when adjusting sliders or selecting models.
2. Data We Do Not Collect
CheckAPICost does not maintain user account databases, does not require logins or credit card submissions, and does not harvest developer identity data:
- No Personal Financial Data: We never request or store bank account details, credit card numbers, or cloud billing API keys.
- No Prompt or Code Payload Ingestion: Our calculators never ask for or ingest proprietary source code, application payloads, or customer datasets.
- No Invasive Fingerprinting: We do not employ canvas fingerprinting, audio context sniffing, or device tracking beacons.
| Data Category | Collected by Us? | Storage Location & Lifespan |
|---|---|---|
| User Calculation Inputs | NO | Ephemeral browser RAM only; lost upon tab close |
| Theme Preference (Dark/Light) | Local only | Client localStorage (localStorage.theme); device only |
| Edge Connection Telemetry | Transient CDN logs | Cloudflare edge cache; anonymized and pruned within 24-72h |
| Contact Inquiries | If submitted | Encrypted corporate inbox; used solely for answering inquiry |
3. Edge Infrastructure & Technical Server Logs
CheckAPICost is hosted globally via Cloudflare Pages and distributed edge content delivery networks (CDNs). When your browser requests static HTML, CSS, or SVG assets, standard edge proxy connection telemetry is generated:
- IP Addresses & User-Agent Strings: Processed transiently at the CDN edge strictly for DDoS mitigation, volumetric attack prevention, and HTTP/3 connection routing.
- Retention Period: Raw edge connection logs are discarded within 24 to 72 hours and are never linked to personal identities.
- Security Protocols: All traffic is enforced over TLS 1.3 with automated HSTS (HTTP Strict Transport Security) headers.
4. Cookies & Local Storage Transparency
We do not utilize tracking cookies, advertising remarketing pixels, or third-party behavioral profiling scripts.
Our website uses exactly one browser storage key:
localStorage.getItem('theme'): Stores your preference for dark mode or light mode (values:'dark'or'light'). This data never leaves your local device.
5. Global Regulatory Compliance
GDPR (General Data Protection Regulation - EU 2016/679)
Under Article 6(1)(f) of the GDPR, the minimal processing of transient edge network logs is justified by our legitimate interest in securing our infrastructure against malicious denial-of-service attacks. Because calculations execute client-side, CheckAPICost processes zero personal data regarding your cloud usage.
CCPA / CPRA (California Consumer Privacy Act)
CheckAPICost does not sell, rent, or share personal information with third parties. We do not participate in cross-context behavioral advertising. California residents possess the statutory right to request information regarding data practices, though because we retain zero personal identifiers, no identifying records exist in our databases.
Children's Online Privacy Protection Act (COPPA)
Our services are targeted exclusively at software developers, cloud architects, and enterprise engineers aged 18 and older. We do not knowingly collect or solicit personal information from children under 13.
6. Third-Party External Links
Our pages contain outbound links to cloud documentation (e.g. AWS, OpenAI, Anthropic, Cloudflare, Mistral, Google Cloud). When you click an external link, your interaction is governed by the destination site's respective privacy policy. We encourage you to review their terms.
7. Privacy Contact & Inquiries
If you have questions regarding our local-first computational architecture or privacy safeguards, contact our security desk at [email protected].
7. Technical Verification of Client-Side Execution
We encourage developers to independently verify our zero-tracking architecture using their browser's built-in inspection tools:
- Inspect Network Activity: Open your browser Developer Tools (F12 or Cmd+Option+I), navigate to the Network tab, and filter by Fetch/XHR.
- Manipulate Sliders: Move the sliders on our Prompt Caching ROI Calculator or AI Pipeline Composer. You will observe that zero HTTP POST or GET requests are transmitted across the wire.
- Inspect Local Storage: Navigate to the Application tab → Local Storage. You will see only the single
themekey, verifying that zero session identifiers or tracking tokens are stored.
8. Subprocessors & Edge Network Infrastructure
CheckAPICost relies on a minimal, highly hardened infrastructure footprint with exactly one principal subprocessor:
- Cloudflare, Inc. (San Francisco, CA, USA): Provides globally distributed edge caching, DNS resolution, and DDoS protection via Cloudflare Pages. Cloudflare processes transient network IP addresses strictly for traffic routing and malicious request filtering under standard enterprise Data Processing Agreements (DPAs).
No advertising technology providers, analytics brokers, or telemetry intermediaries have access to our codebases or visitor traffic.