Privacy Policy

Overview

IncogSay ("we", "our", "us") operates incogsay.com (the "Service") — a set of free online tools covering email authentication, links and URLs, and everyday date calculations. This document explains what happens to the values you type into them, and what the site loads alongside them.

In short: the values you enter into a tool are not stored. The calculators never transmit them at all — the arithmetic happens in your browser. The lookup tools send them to an edge worker that resolves the answer in memory and returns it, writing nothing to a database or a log file. There are no accounts. The site does load Google Analytics and Google AdSense, which is how it stays free, and those are described in full below.

Data We Process

What you type into a tool

Every tool falls into one of two groups, and its own page says which:

• In-browser tools — the date calculators and the password entropy meter. The value you type is read and computed by JavaScript already running on your machine. It is never transmitted, so there is nothing for us to receive, and these tools keep working with the network disconnected.
• Edge tools — the email authentication checks and the link and URL utilities. The domain, URL, QR image or raw header block you submit is sent to a worker running on Cloudflare's network, which performs the DNS query, TLS handshake or HTTP request, assembles the answer in memory and returns it in the same response. It is not written to a database, a log file or a storage bucket on the way through.

This is a property of how the site is built rather than a promise you have to take on trust: there is no database to write to and no account to attach a result to.

The one exception, and it is opt-in

A few link checks can consult public reputation feeds, which necessarily means sending the URL to those third parties. That is a checkbox, unticked by default, labelled where it appears, and never automatic. Leave it alone and no URL leaves our edge worker.

What we do not collect

• No accounts, so no name, email address or password.
• No record of the domains, URLs, QR images, passwords, headers or dates you submit — they are not retained after the response is sent.
• No profile linking one submission to another, or to you.
• No selling, sharing or brokering of submitted values; they are not kept, so there is nothing to sell.

Third-Party Services

The site is free because it carries advertising, and that means three third parties are involved. Here is each of them, and what it does and does not see.

• Google Analytics 4 — measures page visits so we know which tools are worth building next. It receives ordinary web-analytics data: the page you are on, your approximate location, your device and browser, and referrer. It does not receive the values you enter into a tool — we send no custom events carrying them. Governed by Google's Privacy Policy; you can block it outright with Google's opt-out browser add-on.
• Google AdSense — serves the ads. It may use cookies and similar technologies to personalise them based on your prior visits to this and other sites. It sees the same kind of page-visit data, and likewise not what you type into a tool. You can control ad personalisation at My Ad Center or opt out of third-party vendor cookies at aboutads.info.
• Cloudflare — hosts the site and runs the edge workers. As the infrastructure provider it processes network-level metadata such as IP addresses for routing and DDoS protection, under its own Privacy Policy. We do not retain that metadata ourselves.

Web fonts are loaded from Google Fonts, which means your browser requests them from Google's servers. Beyond these, nothing is embedded: no social media trackers, no session recording, no third-party analytics, and no advertising network other than AdSense.

Cookies and Local Storage

We set no cookies of our own — there is no session to keep, because there are no accounts. The only thing IncogSay itself puts in your browser is a single localStorage entry recording your theme preference, light or dark. That never leaves your device, and clearing site data removes it.

The Google services above do set cookies: Analytics uses them to tell repeat visits from new ones, and AdSense uses them for ad measurement and personalisation. Blocking third-party cookies, using the opt-outs linked above, or running a content blocker will stop them; every tool on the site keeps working either way.

Your Rights

We hold no personal data of our own, so there is no record of yours for us to access, correct, export or delete — a request would return an empty result. If you are in the European Economic Area, the United Kingdom or California, the rights you have under the GDPR, the UK GDPR and the CCPA are satisfied here by data minimisation: we did not collect it in the first place.

The exception is the data the Google services described above collect in their own right. Those are controlled by Google, not by us, so access and deletion requests for them go through your Google account's data and privacy controls. The opt-outs listed above stop the collection at source.

Children's privacy: the Service is not directed at children under 13 and we knowingly collect nothing from anyone. Since no personal data is submitted to us, there is nothing to delete on a child's behalf.

Security

Every connection to IncogSay is encrypted with TLS. The lookup tools run as Cloudflare Workers, inside Cloudflare's SOC 2 compliant infrastructure, and the in-browser tools never leave your machine at all. Because nothing is retained, there is no store of past submissions that a breach could expose. The architecture notes go through the technical detail, and how it works explains which tools run where.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected in the "Last updated" date above. Continued use of the Service after changes constitutes acceptance.

Contact

Questions about this policy? Contact us at privacy@incogsay.com.