Skip to content

Privacy Policy

Effective 2026-05-02

1. Who we are

CalcBold (“we,” “us,” or the “Service”) is operated by SemiSoftwares. This policy applies to calcbold.com and any subdomains we operate, including the embed surface at /embed/[slug] when the iframe is loaded on a third-party site.

2. What we collect — by surface

Calculator inputs. Every value you type into a calculator (weight, salary, loan amount, etc.) is processed entirely on your device. We do not store, log, or transmit it to our servers — with one named exception: the AI insight feature (section 5).

Anonymous analytics. If you accept analytics cookies, Google Analytics 4 captures page views, approximate region (city level via Cloudflare CDN), device type, browser, and time on page. IP anonymization is enabled. We never collect a name, email, account, or any value you typed into a calculator.

Server access logs. Our web server records standard request logs — IP address, timestamp, user agent, requested URL — for 30 days, used solely for security incident investigation and abuse mitigation. Logs are not linked to analytics and are not shared with third parties.

Local browser storage. If you use bookmarks, calculation history, saved scenarios, or the recent-search list, those entries live in localStorage on your device. They never leave the browser. Clearing your browser data removes them completely.

3. Cookies and consent

On your first visit, a banner asks whether you accept analytics + ad cookies. The default — and what stays in effect if you reject or ignore the banner — is everything denied:

  • Functional cookies (always loaded) — your light/dark theme preference. Single key, no tracking value, no third-party transmission.
  • Analytics cookies (consent-gated) — Google Analytics 4 cookies (_ga, _ga_*) record anonymous session metrics. Only loaded after you click Accept on the banner. Implementation uses Google Consent Mode v2 — the GA tag itself loads at default-deny, so nothing is recorded until you opt in.
  • Advertising cookies (consent-gated) — Google AdSense personalization cookies. Same gate as analytics. Reject and ads remain non-personalized (contextual based on the page topic only).

If your browser sends Sec-GPC: 1 (Global Privacy Control) we treat the request as a Reject regardless of what the banner says — your browser’s opt-out is authoritative.

4. Advertising

Calculator pages on the public site display ads served by Google AdSense. Ad surfaces are clearly framed and labelled. The embed surface at /embed/[slug] is completely ad-free by design — third-party sites embedding our calculators see zero ads inside the iframe.

AdSense may use cookies to serve personalized ads if you accept on our banner. You can opt out site-wide via Google’s Ad Settings. We never share your calculator inputs with advertisers.

5. AI-powered insights

When you run a calculator, an “AI insight” panel sends the values you typed and the computed result (not any personal information) to our API route at /api/insight, which forwards the minimum required payload to Anthropic’s Claude API for a plain-English explanation.

What we send to Anthropic:

  • The calculator id (e.g. loan-emi-calculator).
  • The numeric values you entered.
  • The result our formula computed.

What we do not attach: IP address, cookies, account identifiers, browsing history, advertising identifiers, location.

Per Anthropic’s API terms, your inputs are not used to train models. Insights are cached in your browser’s localStoragefor 24 hours so the same inputs don’t trigger duplicate API calls.

For extra privacy, you can block requests to /api/insight in your browser’s ad-blocker. The calculator itself will still work; a default explanation will appear in the insight panel.

6. Embed surface

When a third-party site embeds a CalcBold calculator via <iframe src="https://calcbold.com/embed/[slug]">, this Privacy Policy continues to apply inside the iframe. The host site’s privacy policy applies to the rest of their page. Specifically:

  • We record the parent domain that embedded the calculator (viadocument.referrer) for analytics — “500 sites embedded the BMI calculator this month” — but never combine it with any user identifier.
  • The embed surface does not load Google Analytics, AdSense, Microsoft Clarity, or any other third-party script. The only network call is the optional AI insight POST you trigger by using the calculator.
  • The embed never reads or writes localStorage.

7. Optional monitoring services

The site operator may enable any of the following privacy-respecting services in production. None are loaded if their respective environment variable is unset:

  • Microsoft Clarity — heatmaps + session replay. Activates only if NEXT_PUBLIC_CLARITY_ID is set. Replay is mouse-trail only — input field values are masked by default.
  • Cloudflare Web Analytics — privacy-respecting real-user-monitoring. No cookies, no fingerprinting.
  • Sentry — frontend error tracking. Captures JavaScript exceptions only, not calculator values.

8. Third parties referenced

9. Your rights — GDPR & CCPA

Because we do not store personal data tied to individual users, there is no account to delete and no stored dataset to export. If you believe we have information about you through third-party integrations, you have the following rights regardless of jurisdiction:

  • Access. Request a copy of any data we hold about you.
  • Rectification. Correct inaccurate data.
  • Erasure (“right to be forgotten”). Request deletion of any data we hold.
  • Portability. Receive data in a machine-readable format.
  • Object to processing. Withdraw consent at any time. Re-clicking the banner via localStorage.removeItem("cb_cookie_consent_v1") and reloading restores the consent prompt.
  • CCPA “Do Not Sell”.We do not sell personal information. Reject on the cookie banner is also our CCPA “Do Not Sell” switch.

To exercise any of these rights, email [email protected]. We respond within 30 days.

10. Children

CalcBold is designed for users aged 13 and over. We do not knowingly collect any information from children under 13. If you believe a child has used the service and that information may have been collected, email [email protected] and we will remove any applicable records.

11. Data security

The site is served over TLS 1.2/1.3 only. Cloudflare’s WAF provides DDoS and OWASP-rule protection. Our backend Anthropic API key is server-side only and never exposed to the browser. Server access is restricted to a single operator account; secrets are rotatable via a documented runbook.

12. Changes to this policy

We may update this policy as the Service evolves (new features, legal changes, additional integrations). Material changes will be reflected in the Effective date at the top of this page. Continued use of the Service after an update constitutes acceptance of the new terms.

13. Contact

Privacy questions, data requests, complaints: [email protected]. General contact: [email protected]. See the Terms of Use for the rules governing use of the service, including embed and DMCA terms.