Privacy policy

The short version

Sum & Carry does not ask you to create an account, and every calculation runs inside your own browser. The figures you type — rates, hours, bills, property numbers — are never transmitted to us, never logged, and never stored on any server.

What we do collect is limited to cookieless visitor statistics and, where advertising is enabled, the cookies our advertising partner sets. Both are described in full below.

Who we are

Sum & Carry is operated by Pete Burgess, reachable at pete@sumandcarry.com. Any question about this policy, or any request described under “Your rights” below, should go to that address.

Information we do not collect

• Scratchpad content. Every figure and label you enter is processed by JavaScript running on your own device. No values are sent to a server or written to any database we control.
• Account information. There are no accounts, so there are no names, emails, or passwords to hold.
• Payment information. Nothing on this site is for sale, and no payment details are ever requested or handled.

Data stored on your own device

To make the tool useful between visits, Sum & Carry uses your browser's local storage — a private area on your own computer or phone — to remember three things:

• Your sheets and their contents, so your work is still there when you come back.
• Your light or dark theme preference.
• Whether you accepted or declined the cookie notice.

This data never leaves your device and we cannot read it. Clearing your browser's site data removes all of it.

The Share link feature encodes the current sheet into the web address itself. Nothing is uploaded when you use it, but anyone you send that link to can read the sheet, so treat a shared link as public.

Information that is collected

Analytics

We use Cloudflare Web Analytics to understand which pages are visited and how people arrive. It records ordinary technical information such as pages viewed, approximate geographic region, referring website, browser type and device category. It sets no cookies, stores nothing on your device, and does not build a profile or follow you to other websites, so it runs for every visitor rather than sitting behind the cookie banner. It is used only in aggregate, is not used to identify individuals, and is never connected to anything typed into the scratchpad.

Server logs

Our hosting provider keeps standard access logs, which typically include IP address, timestamp, requested page, and browser user agent. These exist for security and reliability and are retained according to the host's own schedule.

Advertising

This site displays advertising served by Google AdSense. Consent for advertising is collected through Google's certified consent management platform rather than a banner of our own, because Google requires a certified platform in order to serve ads to visitors in the EEA, UK and Switzerland at all. Those visitors are shown a message with an explicit option to refuse, presented as prominently as the option to accept. In connection with that:

• Google and its partners may use cookies to serve ads based on your prior visits to this and other websites.
• You can opt out of personalised advertising at Google Ads Settings, and out of some third-party vendor cookies at aboutads.info.
• Advertising cookies are set by Google, not by us, and we have no access to the data they collect. Google's handling of that data is governed by the Google Privacy & Terms page.

Cookies

The scratchpad itself sets no cookies, and neither does our analytics. Any cookie present on this site comes from the advertising described above. You can block or delete cookies through your browser settings; doing so will not affect the scratchpad, which will continue to work normally.

Visitors in the EEA, UK and Switzerland

Where the GDPR applies, our lawful basis for processing cookieless visitor statistics is our legitimate interest in operating a free website, and our basis for advertising cookies is your consent, which Google's certified consent message asks for and which you can refuse outright. Your choice is recorded by that tool, and you can change it later through the same message. You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to lodge a complaint with your national supervisory authority.

Because we hold no accounts and store nothing you type, there is generally very little personal data associated with you to retrieve or delete. Requests can still be made to the contact address above.

Visitors in California

Under the CCPA and CPRA, California residents may request disclosure of the categories of personal information collected, request deletion, and opt out of the “sale” or “sharing” of personal information. We do not sell personal information. The advertising cookies described above may constitute “sharing” for cross-context behavioural advertising under California law; you can opt out through the Google Ads Settings link above or through your browser's global privacy control signal.

Children

This site is a general-purpose utility and is not directed at children under 13. We do not knowingly collect personal information from children.

External links

Some pages link to resources operated by others. We do not control those sites and are not responsible for their privacy practices. Read their policies before providing information to them.

Changes

If this policy changes, the updated version will be posted here with a new date at the top of the page.

Questions

Anything about this policy, or any request under it, can be sent to pete@sumandcarry.com. We aim to respond within 30 days.