Privacy Policy

You can use the calculator without an account, and token counting never leaves your browser — for GPT models it is computed locally, and Claude counts are a local estimate. One thing does leave it: the AI rewrite sends your prompt to Google. Nothing you type is stored unless you are signed in, in which case saving a calculation stores it — including the prompt text — until you delete it.

The site is funded by advertising. Google and other third-party vendors serve those ads and use cookies to do it, which is the one part of this page that involves being tracked across other websites rather than just this one. It is described in full below, including how to turn it off.

Token counts for OpenAI models are computed locally. The tokenizer is downloaded to your device and run there, so the text you paste is never transmitted for a GPT count — not to us, not to OpenAI.

Your light/dark preference is kept in localStorage on your device and is never sent anywhere.

Each of these happens only in response to something you do. None of them run in the background.

• Google — using the AI rewrite sends your prompt to the Gemini API to be rewritten. This is the only feature that transmits what you typed. If Gemini is unavailable, your prompt is shortened by a rule-based pass that runs on our server without contacting anyone else.
• Resend — your email address, to deliver sign-up confirmation and password reset messages. Only if you create an account.

Your text is sent to these providers to perform the operation you asked for. What they do with it afterwards is governed by their own terms, not ours.

An account exists so your work persists between visits. It stores:

• Your identity — name, email address, whether that email is verified, and a profile image if you signed in with Google. Passwords are stored only as a hash; the plain password is never written down.
• Your sessions — an expiring session token, plus the IP address and browser user agent the session was created from. These are recorded so a session can be attributed if one is stolen. Signing out ends the current session; there is not yet a screen listing every active session.
• Your saved work — saved calculations, collections, history entries, saved reports, and shares. Saved calculations and history entries include the full prompt text, along with any response or notes you added. That is the point of saving them, but it is worth stating plainly: if you paste something confidential and save it, it is stored.

History is recorded only for signed-in users. Using the calculator signed out leaves no record of what you typed.

Creating a share link generates an unguessable token. A share is unlisted by default, meaning anyone with the link can open it but search engines are told not to index it. Marking a share public makes it indexable, and it may then appear in search results.

Revoking a share takes effect immediately — the cached page is purged rather than left to expire.

• Rate limiting — the paid routes are capped per caller. For a signed-in user the key is a hash of the session token. For an anonymous caller it is the IP address, held in a short-lived counter that expires on its own. There is no way to identify a person from it, but it is an IP address and we would rather say so.
• Error reporting — when something breaks, a report goes to Sentry containing the error and a stack trace. It is configured not to attach personally identifying information, and structured logs redact any field whose name suggests a key, token, password, cookie, or secret.
• Analytics — two services, which behave differently and are worth separating. Vercel Analytics records aggregate page views, uses no cookies, and builds no profile. Google Analytics 4 does use cookies, assigns your browser a random identifier so returning visits can be recognised, and reports to Google. Neither receives the text you paste into the calculator.

Not everything stored on your device is a cookie, and the distinction matters here because the three kinds behave very differently.

• Strictly necessary — if you sign in, a session cookie keeps you signed in. Without it there is no way to stay logged in between pages. It is not used for advertising and is not shared.
• Preferences — your light/dark choice is kept in localStorage, not a cookie, and never leaves your device.
• Analytics — Google Analytics sets cookies (named _ga and similar) holding a random identifier, so a second visit can be recognised as the same browser. They are not used for advertising and carry nothing you typed. Vercel Analytics, running alongside it, uses no cookies at all.
• Advertising — set by Google and other ad vendors, not by us. These are the ones that follow you between sites, and they are the subject of the next section.

Blocking cookies in your browser, or using an ad blocker, does not break the calculator. Token counting, the comparison table, and the model pages all work with every cookie refused. Only staying signed in requires one — analytics and advertising cookies can all be refused with no loss of function. In the EEA, the UK, and Switzerland they are not set at all until you allow them; see your choices.

If you are in the European Economic Area, the United Kingdom, or Switzerland, analytics and advertising storage starts out denied. That default is set before any Google tag runs, so the cookies described above are not written unless and until you agree to them. The strictly necessary storage — the sign-in session cookie, and what is needed to keep the service secure — is unaffected, because refusing it would only break signing in.

A consent banner from Google, which is a certified consent management platform, asks for that choice on your first visit and records it. Choosing to allow cookies is what lifts the default; choosing not to leaves it in place, and the site keeps working either way.

Outside those regions the banner does not appear and analytics and advertising cookies are set on arrival, as they were before. The opt-out routes under Advertising are the ones that apply to you, and they work from anywhere.

To change a choice you have already made:

• Reopen the banner — use the privacy or cookie settings link the banner itself offers, where one is shown.
• Clear this site’s cookies in your browser. Your recorded choice is stored in one, so removing it makes the banner ask again from scratch. This route does not depend on a link being present and always works.
• Refuse at the browser — blocking cookies or using an ad blocker overrides all of the above, and nothing on this site stops working if you do.

Withdrawing consent stops further analytics and advertising cookies from being set. It does not retroactively erase what was already collected while consent was in place; for that, get in touch.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites on the internet.

Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet. This site uses Google AdSense, and Google may use the DoubleClick DART cookie and similar identifiers for this purpose.

You can turn personalised advertising off. Three routes, in order of coverage:

• Google specifically — opt out of personalised advertising at Google Ads Settings. Ads still appear; they stop being tailored to you.
• Many vendors at once — opt out of personalised advertising from participating third-party vendors at aboutads.info/choices or, in Europe, youronlinechoices.eu.
• At the browser — block third-party cookies, or use an ad blocker. This is the only option that does not depend on a vendor honouring a preference, and nothing on this site stops working if you take it.

More on how Google handles data from sites that use its services is in Google’s own policy.

What advertising does not get: the text you paste into the calculator, anything you have saved, or your email address. Ad vendors see the page you are on, not what you typed into it. Nothing you type is passed to an advertiser, and none of it is used to target an ad.

The service runs on infrastructure operated by others. Beyond the providers already named, the database is hosted by Neon, the application by Vercel, rate-limit counters by Upstash, and advertising by Google.

Nothing is sold or rented. Your prompts, saved work, and email address are not shared with advertisers — what is shared for advertising is described under Advertising, and it is browsing behaviour rather than anything you typed.

Saved work is kept until you delete it. Deleting an item deletes it; deleting your account removes your saved calculations, collections, history, reports, and shares along with it. Sessions expire on their own. Rate-limit counters expire within a day at most.

• Export — the history page exports everything you have saved as CSV, JSON, Markdown, or a ZIP of all four.
• Delete — any individual item, or your whole account, from account settings.
• Avoid entirely — the calculator works signed out, and signed out nothing is stored.

Depending on where you live you may have additional statutory rights to access, correct, or erase your data. Get in touch and we will action it.

If you live in California, the CCPA as amended by the CPRA gives you specific rights over personal information. What follows is what this site actually does, in the terms that law uses.

Nothing is sold for money.But “share” has a narrower and more specific meaning under the CPRA than in ordinary use — disclosure for cross-context behavioural advertising — and by that definition this site does share personal information, because it serves personalised ads through Google AdSense. What is shared is browsing behaviour, as described under Advertising. It is not the text you paste, your saved work, or your email address.

Categories of personal information collected in the past 12 months:

• Identifiers— your email address if you create an account, and IP address, which is used for rate limiting and recorded with sessions.
• Internet or network activity— pages visited and interactions with the calculator, through the analytics and advertising cookies described under Cookies.
• Your own content— prompts and calculations, but only the ones you deliberately save while signed in. Signed out, nothing is stored.
• Account credentials— a password, stored hashed. The CPRA treats a log-in and password together as sensitive personal information. It is used to sign you in and for nothing else, which is already the limited use the law allows, so there is no separate right to restrict it here.

No inferences or profiles are built about you, and none of the above is disclosed for money to anyone.

Your rights, and how to use them:

• Opt out of sharing — the routes under Advertisingall work, and the browser-level one takes effect without asking anyone’s permission.
• Global Privacy Control— if your browser sends a GPC signal, this site turns advertising storage off automatically, before any Google tag runs. You do not have to ask, and there is no setting to find. Analytics is left on: GPC is an opt-out of sale and sharing, not of measurement.
• Know, correct, and delete— export and deletion are self-service and immediate, described under Your control over it. For anything they do not cover, get in touch.
• No retaliation— exercising any of this changes nothing about what the site does for you. There is no paid tier to lose and no feature gated behind consent; the calculator works signed out, with cookies blocked, and with GPC on.

Personal information is not knowingly sold or shared for anyone under 16. See Children.

This is a developer tool and is not directed at children. Accounts are not knowingly created for anyone under 13.

If this policy changes, the date at the top changes with it. Because the site is open source, the full revision history of this page is public in the repository — you do not have to take our word for what it used to say.

This site is operated by the maintainers of the open-source project it is built from. If you need to reach a named controller for a data-protection request — or to identify one for a regulator — get in touch and we will provide it.

Anything unclear or anything that looks wrong, tell us. If a claim on this page does not match what the code does, that is a bug and we want to know.