Privacy Policy

Effective date: July 22, 2026

This policy explains how Token-Calculator.net handles information when you use our public browser tools, create an account, subscribe to the Token API, call the API, or contact us. It also explains how our service providers, including Cloudflare, Clerk, Creem, and Google, may process information on our behalf or under their own privacy terms.

1. Who we are

Token-Calculator.net operates the website at https://token-calculator.net. For questions about this policy or a request concerning your personal information, email admin@token-calculator.net.

2. Information we process

Public browser tools

Token calculations, word counts, character counts, cost estimates, memory estimates, and speed simulations on the public site run in your browser. Text pasted into the browser calculator stays in that browser tab. We do not receive or store it, and it is not sent to OpenAI, Anthropic, Google, or another model provider by the calculator.

Token API requests

The Token API works differently because your application sends text to our Cloudflare-hosted endpoint. We process that text in memory to return token, character, and word counts. We do not save the text in our business database. We do keep usage records that include the endpoint, token count, character count, API key identifier, and request time. These records help us operate the service, investigate abuse, and support account and subscription reporting.

Accounts and authentication

Clerk provides sign-up, sign-in, and session management. When you create or use an account, Clerk may process your email address, name, user identifier, authentication factors, session information, IP address, browser or device information, and security signals. We store your Clerk user identifier, email address, name, and account timestamps in our Cloudflare D1 database so we can connect your account to subscriptions, API keys, and usage records. Clerk uses cookies that are necessary to keep you signed in and protect your account.

API keys

For each API key, we store its name, prefix, cryptographic hash, an encrypted copy that allows you to copy the key from your dashboard, creation and update times, last-used time, and revocation status. You are responsible for keeping API keys confidential and revoking any key you believe has been exposed.

Checkout and subscriptions

Creem acts as Merchant of Record for paid Token API subscriptions. We send Creem the email address associated with your account, the selected plan, and internal identifiers needed to match the purchase to your account. Creem collects and processes the checkout, billing, tax, payment, fraud-prevention, and transaction information required to complete the purchase. We receive and store identifiers and status information such as Creem customer, checkout, product, and subscription IDs; subscription status; billing period dates; and cancellation status. Full payment card details are handled by Creem and its payment providers, not stored in our D1 database.

Site usage and security data

When you visit the site or call the API, Cloudflare and other infrastructure providers may process standard request and security information such as IP address, browser and device type, requested URL, referring page, timestamps, network routing information, and signals used to prevent abuse. Google Analytics may also collect page views, interactions, approximate location, device or browser information, and referral information. Analytics does not receive the text you paste into the browser calculator or the body of a Token API request from us.

Messages you send us

If you email us or submit our feedback form, we receive the contact details, message, and any files or information you choose to provide. The feedback form is hosted by Google, so information submitted there is also handled under Google's privacy terms.

3. Cookies and similar technologies

We use or may use the following categories of browser storage and similar technologies:

• Essential technologies: Clerk session cookies support authentication and account security.
• Preferences: local browser storage remembers settings such as your light or dark theme.
• Analytics: Google Analytics may use cookies or identifiers to measure visits and site usage.
• Advertising: when advertising is enabled, Google AdSense and its partners may use cookies, web beacons, IP addresses, or other identifiers to deliver, personalize, measure, and protect advertising.

Before serving AdSense ads in regions where consent is required, we will use a consent management platform to provide the required choices. You can also restrict or delete cookies through your browser. Blocking essential authentication cookies may prevent account features from working.

4. Google Analytics and advertising

We use Google Analytics to understand how people find and use the site. When Google AdSense advertising is enabled, Google and its advertising partners may place and read cookies in your browser or use web beacons, IP addresses, and similar identifiers as a result of ads being served on this site. These technologies may be used for ad delivery, personalization, measurement, frequency control, reporting, and fraud prevention.

Learn more about how Google uses information from sites that use its services. You can manage personalized advertising in Google Ads Settings and can install the Google Analytics opt-out browser add-on. Where our consent message is available, you can also use it to accept, reject, or manage optional uses.

5. How we use information

We use the information described above to:

• provide the website, accounts, Token API, subscriptions, and customer support;
• authenticate users and protect accounts and API keys;
• process purchases and keep subscription access in sync;
• measure reliability and understand how the site is used;
• detect fraud, abuse, security incidents, and violations of our Terms of Service;
• maintain, debug, and improve the service; and
• comply with legal obligations and resolve disputes.

6. Service providers and disclosure

We share information only when needed to operate the service or meet a legal obligation. Our main providers are:

• Cloudflare for hosting, network delivery, security, and D1 data storage;
• Clerk for authentication and account sessions;
• Creem for checkout, subscription billing, tax handling, payment processing, and fraud prevention; and
• Google for Analytics, the feedback form, and, when enabled, AdSense advertising.

We may also disclose information if reasonably necessary to comply with law, protect users or the service, enforce our agreements, investigate abuse, or complete a merger, financing, acquisition, or transfer of the service. We do not sell personal information for money. Advertising-related disclosures may be treated as "sharing" or targeted advertising under some privacy laws; eligible users can exercise applicable opt-out rights through our consent controls or by contacting us.

7. Legal grounds and international processing

Depending on where you live, we process information to perform a contract with you, comply with law, pursue legitimate interests such as operating and securing the service, or based on your consent. Where consent is the legal basis, you may withdraw it at any time. Our providers operate internationally, so information may be processed outside your country under the safeguards used by those providers and required by applicable law.

8. Data retention

Browser calculator text is not retained by us. Token API request text is processed for the response and is not stored in our business database. We keep account, subscription, API key, usage, checkout, and security records for as long as reasonably needed to provide the service, maintain accurate business records, prevent abuse, resolve disputes, and meet legal obligations. Creem, Clerk, Google, and Cloudflare retain information according to their own policies and contractual obligations.

9. Your privacy choices and rights

Depending on your location, you may have the right to request access, correction, deletion, restriction, portability, or a copy of personal information we hold about you. You may also have the right to object to certain processing, withdraw consent, or opt out of targeted advertising or certain data sharing. We may need to verify your identity before completing a request.

To make a request, email admin@token-calculator.net. You can also revoke API keys from your dashboard, cancel a subscription through the available billing controls or support, manage cookies through your browser, and use Google's advertising choices linked above.

10. Security

We use reasonable technical and organizational safeguards designed to protect the information we handle. These include HTTPS, access controls, signed authentication tokens, hashed and encrypted API key records, and encrypted Cloudflare D1 storage. No internet service or storage system can guarantee absolute security.

11. Children's privacy

The service is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

12. Changes to this policy

We may update this policy when the service, providers, or legal requirements change. We will post the revised policy on this page and update the effective date. Material changes may also be communicated through the site or account interface when appropriate.

Contact us

Questions or privacy requests can be sent to admin@token-calculator.net. For general product feedback, you can also use our feedback form.