Privacy Policy

Who is responsible

The controller of the personal data described here is Pablo Gómez, an individual based in Argentina. Contact for anything privacy-related: support@premiumcalculator.fyi.

For card payments, Armitage Labs OÜ ("Creem", Rotermanni 14, 10111 Tallinn, Estonia) acts as merchant of record and processes your billing details (such as email, name, billing address and payment method) as a controller, or jointly with us where its notice says so, under Creem's Privacy Notice. We never receive your card details.

For crypto payments, FD Transfers LLC ("NOWPayments", Euro House, Richmond Hill Road, Kingstown, Saint Vincent and the Grenadines) processes the payment data (amounts, coin, wallet addresses, transaction identifiers and anything you give it, such as an email) under its privacy policy. Wallet addresses and transactions are also public on the blockchain by design.

What we collect, why, and on what legal basis

Your order and your certificate

When you start a payment, we create an order record with: the calculation, the language of the page, your country (a two-letter code that Cloudflare derives from your connection; we do not store your IP address), any campaign tags in the link you arrived from (utm_source, utm_medium, utm_campaign), the version and time of the statements you accepted in the checkboxes, the payment method, the payment provider's references and the payment status, and the date and time. When the payment is confirmed, we also store the result and create your certificate.

Why: to deliver your result and certificate, show the certificate at its link, prove the purchase and your consent, and handle support, refunds and chargebacks. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for keeping order records, our legal obligations (Art. 6(1)(c)).

Your name and the Wall of Fame (optional)

If you choose to, we store the name you type and whether you want to appear on the Wall of Fame. The name is public on your certificate and, if you opt in, on the Wall of Fame. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time by removing the name from the result page or by writing to us.

What we pass to the payment providers, and what we see

Card (Creem): to open the checkout we send Creem our order reference, the calculation and the page language. Creem collects your email, name, billing details and card on its own checkout.

Crypto (NOWPayments): to create the invoice we send NOWPayments the price, our order reference and a description that includes the calculation. You choose the coin on its page. NOWPayments tells us the payment status, the coin and the amounts paid; the paying wallet and transaction are visible on the blockchain. If a crypto refund is due, you give us the wallet address to send it to.

In Creem's and NOWPayments' dashboards we can see the details of your payment, including the email and name you gave at checkout, if any. We use them only to answer you, process refunds, fight fraud and chargebacks, and keep our accounts. We never use them for marketing. Legal basis: performance of the contract, our legitimate interest in preventing fraud (Art. 6(1)(f)) and our legal obligations.

Anti-bot check (Cloudflare Turnstile)

Cloudflare Turnstile is loaded only when you open the payment window, and checks that you are a human and not a bot. To do that it processes signals from your browser and connection, such as your IP address, user agent and TLS fingerprint. Why: to protect the checkout from bots and card testing. Legal basis: our legitimate interest in keeping the site and payments secure (Art. 6(1)(f)). Cloudflare processes these signals on our behalf, and also as an independent controller to improve Turnstile: see the Turnstile Privacy Addendum.

Usage statistics

We count how the site is used so we can improve it, without identifying anyone:

• Our own counters record events such as "page viewed", "paywall shown", "paid" or "certificate shared" (and the channel used), together with the page path, the language, the country and any campaign tags in the link. They contain no IP address, no device or browser identifier and no cookie, so they cannot be linked to you or to each other. They are stored in Cloudflare Workers Analytics Engine.
• We do not use any third-party analytics service or tracking script.

Legal basis: our legitimate interest in understanding, in aggregate, how the site is used (Art. 6(1)(f)).

Technical logs and security

Like any website, every request passes through Cloudflare, which processes technical data (IP address, user agent, requested address, time) to deliver the pages and protect them against attacks and abuse, including rate limiting. Our application logs record errors and operational events. Legal basis: our legitimate interest in running a secure, working site (Art. 6(1)(f)).

Emails you send us

If you write to us, we receive your email address and whatever you include in the message, and use them to answer you. Legal basis: our legitimate interest in answering you, or the contract if your message is about a purchase.

What we do not do

• We do not sell or rent personal data, and we do not share it for advertising.
• We do not build profiles or make automated decisions with legal or similarly significant effects on you.
• We do not use advertising or social media trackers.
• We do not create accounts or ask for a password.

Cookies and similar technologies

The site itself sets no cookies and stores nothing in your browser (no local storage or session storage). That is why there is no cookie banner.

The only third-party code that runs in your browser is Cloudflare Turnstile. It is loaded only when you open the payment window, and it may use information on your device strictly to tell humans from bots. We consider this check strictly necessary to provide the secure checkout you ask for. Our usage counters are sent by our own code, read nothing stored on your device and contain no identifier. If we ever add anything that needs your consent, we will ask for it first.

Who processes your data

• Cloudflare, Inc. (USA, global network): hosting, database, anti-bot check, statistics and logs, as our processor under its data processing addendum. Cloudflare's Privacy Policy.
• Armitage Labs OÜ (Creem) (Estonia, EU): card payments, as merchant of record and controller, together with its own payment processors. Creem's Privacy Notice.
• FD Transfers LLC (NOWPayments) (Saint Vincent and the Grenadines): crypto payment processing. NOWPayments' privacy policy.
• Public blockchains: crypto transactions, including the wallet addresses involved, are public by design.
• Google (Gmail): if you email us, your message is stored in our mailbox. Google's Privacy Policy.
• The public: the name you choose, on your certificate and (if you opt in) on the Wall of Fame.
• Authorities: only when the law requires it.

International transfers

We are based in Argentina, a country the European Commission recognizes as providing adequate protection for personal data. Creem is based in the European Union (Estonia). Cloudflare and Google are based in the United States and process data in several countries; transfers to them rely on the safeguards they offer, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. NOWPayments is based in Saint Vincent and the Grenadines; data goes to it only when you choose to pay in crypto, because it is necessary to process that payment.

How long we keep data

• Certificate and paid order (calculation, result, language, country, campaign tags, consent, references, date): for as long as the site runs, so your certificate link keeps working, unless you ask us to delete it. If you ask, we delete it and keep only a minimal payment record (order reference, payment method, provider references, date and country) for 10 years, for tax and accounting.
• Orders that are never paid (abandoned or expired checkouts): deleted after 30 days.
• Name and Wall of Fame entry: until you remove them, ask us to, or we remove them under the Terms.
• Usage counters: deleted automatically after 3 months.
• Application logs: deleted automatically after at most 7 days.
• Emails with us: 2 years after the last message, or longer if needed for an open dispute.
• Cloudflare's network and Turnstile data: as set out in Cloudflare's policies. Billing and payment data: as set out in Creem's and NOWPayments' policies.

Your rights and how to use them

Depending on where you live, you can ask us to access, correct, delete or export your data, to restrict its use, or object to it, and you can withdraw your consent at any time. You do not have to give a reason, and it is free.

Write to support@premiumcalculator.fyi. Because there are no accounts, include something that shows the certificate is yours: the link of your result page, or the email you used at checkout together with your receipt (card) or the transaction identifier (crypto). To remove your name or Wall of Fame entry right away, use the button on the result page.

We will answer within 48 hours whenever we can, and always within the legal deadlines (one month under the GDPR; in Argentina, 10 calendar days for access requests and 5 business days for corrections and deletions).

You can also complain to a data protection authority: in the EU, the authority of your country (list); in the UK, the ICO; in Argentina, the Agencia de Acceso a la Información Pública (AAIP). Argentine law requires us to tell you that you can exercise your right of access free of charge at intervals of no less than six months, unless you show a legitimate interest (Art. 14(3), Law 25,326), and that the AAIP, as the authority enforcing Law 25,326, handles complaints from anyone whose data protection rights are affected.

Children

The site is only for people aged 18 or over. We do not knowingly collect data from children. If we learn that a minor made a purchase, we will refund it and delete the certificate.

Security

The site only works over HTTPS. Certificate links are random and hard to guess, but anyone who has a certificate link can see it, so share it only where you want it seen. The order reference in your result page link is private: do not share that link.

Changes to this policy

If we change how we handle data, we will update this page and its date before the change applies. If a change needs your consent, we will ask for it.