Privacy Policy

This Privacy Policy describes how Stat-Tools ("we", "us", or "our") collects, uses, and shares information when you use stat-tools.xyz.

1. Information We Collect

a) Account information

If you create a free account, we collect your name and email address. Your password is hashed using bcrypt and never stored in plain text.

b) Calculation data

When you use our tools without logging in, the data you enter is sent to our server solely to perform the calculation and is not stored. If you are logged in and click "Save result", the input and output of that calculation are saved to your account history.

c) Server logs

Our web server automatically logs IP addresses, browser type, referring page, and pages visited. These logs are used for security monitoring and are retained for 30 days.

d) Cookies

We store your authentication token in localStorage (not a cookie) to keep you logged in. We do not currently use tracking cookies. If we add Google AdSense, Google may set cookies as described in Google's Privacy Policy.

2. How We Use Your Information

• To create and manage your account
• To save and display your calculation history
• To improve the accuracy and functionality of our tools
• To send important account-related notifications (we do not send marketing email)
• To detect and prevent abuse or security incidents

3. Third-Party Services

Google Fonts: We load fonts from fonts.googleapis.com. Google may log this request per their privacy policy.

Chart.js (CDN): Loaded from cdn.jsdelivr.net for interactive charts. jsDelivr may log your IP.

Advertising: We may display ads via Google AdSense in the future. When enabled, Google may use cookies and device identifiers to serve personalised ads based on your visits to this and other websites. You can opt out via Google Ad Settings or install the Google Analytics Opt-out Browser Add-on.

4. Data Retention

Account data and saved calculations are retained until you delete your account. You can delete your account (and all associated data) at any time from your dashboard settings. Server access logs are purged after 30 days.

5. Data Security

All traffic is encrypted with TLS (HTTPS). Passwords are hashed with bcrypt. Access tokens use signed JWTs. Our server applies security headers (HSTS, X-Frame-Options, CSP) on every response. We do not sell or share your personal data with third parties for marketing purposes.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Object to or restrict processing

To exercise these rights, log in and use the dashboard settings, or contact us at plescadenis86@gmail.com.

7. Children's Privacy

Stat-Tools is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email plescadenis86@gmail.com.