TRANSPARENCY FIRST

Privacy, cookies and legal notice

Last updated: 19 September 2026This page explains which data calcupop.com processes, why it is used and which rights you may exercise. It applies to the main site, calculators, invitations, community features and the taste-box pilot.

Data controller

Alessandro Spatari, operator of the CalcuPop projectprivacy@calcupop.com

CalcuPop is the project name and is not a separate legal entity. For privacy matters, email privacy@calcupop.com.

Data, purposes and legal grounds

Required fields are marked in each form. Do not enter health data, documents, full addresses or other confidential information in free-text fields of public feedback, community or box forms.

Statistics separate opens, first interactions, updated numeric results, saves, print starts and share actions by UTC day, tool and edition, without entered values. Excluded administrator tests are not counted. Feedback and Box forms use temporary network and content hashes to limit frequency and duplicates: they expire within one day and are progressively deleted on subsequent requests.

Blood pressure log and optional family link: health information entered in dedicated fields, averages and backups stay on your device. Only explicitly enabling the link uploads a browser-encrypted summary, updated when you save. The reading key stays in the link fragment; the server keeps one encrypted copy, random identifiers, credential hashes and technical dates. Link holders can read the copy: share only with authorised people. Revoke the link to delete the shared copy; the local log is independent. Links expire after 90 days without updates; expired copies are deleted during subsequent creation or administration operations. Network hashes used to limit creation expire within 48 hours and are progressively deleted. The operator can disable this service. It is not a medical monitoring or alert service.

Browsing and security

Data: IP address, user agent, date, time, requested page and technical request metadata held in service logs.
Purpose: Deliver and protect the site, diagnose errors and limit abuse.
Legal basis: Legitimate interest in service security and operation (GDPR Art. 6(1)(f)).
Retention: Under providers’ technical retention periods and only as long as needed for security and diagnostics.

Aggregate statistics

Data: Counts of visits, uses and shares associated with country code, site language or edition and calculator; the analytics database stores neither IP addresses nor visitor profiles.
Purpose: Understand which tools and language editions are useful, see the general origin of visits and improve CalcuPop.
Legal basis: Legitimate interest in improving the service (GDPR Art. 6(1)(f)).
Retention: Counters remain aggregate; device markers expire, end with the session or can be cleared in the browser.

Reports and feedback

Data: Calculator and page, report type, message, expected result and optional email.
Purpose: Investigate the issue, improve the site and reply when requested.
Legal basis: User request and legitimate interest in service quality (GDPR Art. 6(1)(b) and (f)).
Retention: Until the report is handled and for a reasonable later verification or legal-protection period.

Taste-box enquiries

Data: Selected box, destination, country or city, product links, preferences, optional email, page and request date.
Purpose: Assess a non-binding expression of interest and, where applicable, reply. No payment or delivery address is collected at this stage.
Legal basis: Steps requested by the user and legitimate interest in assessing the pilot (GDPR Art. 6(1)(b) and (f)).
Retention: Until the assessment and any follow-up end, then only for documented or legal-protection needs.

Invitations and shared results

Data: Invitation content and the generated link. Shared calculator results stay in the link fragment and are not stored in CalcuPop’s database.
Purpose: Create the requested link and show it to people selected by the user.
Legal basis: Performance of the requested feature (GDPR Art. 6(1)(b)).
Retention: The short invitation link expires after one month. Anyone holding it can read and forward it.

Community ratings and tips

Data: Dish, rating, substitution, optional tip, random device ID and a non-readable hash derived from network and browser data.
Purpose: Prevent duplicates and abuse, moderate text and publish approved statistics or tips.
Legal basis: User-requested feature and legitimate interest in community security (GDPR Art. 6(1)(b) and (f)).
Retention: While the contribution is useful and needed for the community or abuse prevention, subject to a valid deletion request.

PayPal or Stripe support

Data: PayPal or Stripe may provide the amount, date, transaction ID and payer details. CalcuPop does not see or store card data.
Purpose: Manage the voluntary contribution and applicable administrative, accounting or tax duties.
Legal basis: Transaction requested by the user and legal obligations (GDPR Art. 6(1)(b) and (c)).
Retention: For periods required by applicable rules and PayPal or Stripe systems.

A surprise for you

Data: For single-use surprises we store the drawn message, language, category, link, expiry and reveal status. We do not request recipient names, contacts or address books. A daily IP address hash limits abusive creation; the IP itself is not stored in this table. If you personalise a surprise, we also store the text, titles, artists and YouTube links you enter. They are shown only on reveal and are not added to the catalog. Manual selections have separate counts and no catalog ratings. We also record creation and reveal counts per message and language and, if you choose to vote, a positive or negative vote linked to the surprise, with its date. Voting requires no identity or contact details. Senders cannot access these data; the voting dashboard is restricted to the administrator.
Purpose: Create the requested link and show it to people selected by the user.
Legal basis: Performance of the requested feature (GDPR Art. 6(1)(b)).
Retention: Links work for 30 days and allow one reveal. Expired records are removed by subsequent service cleanups; anti-abuse hashes expire within 48 hours. Recipients can save or forward a copy of the card. Counts and votes are retained to review and improve the catalog, including after links expire; they contain no names or contact details. Pausing a message does not delete its history.

Cookies and browser storage

CalcuPop does not automatically load advertising or profiling cookies. It only uses first-party preferences and technical storage.

calcupop_locale and calcupop_market

Remember the selected language and geographical version.

12 months

qmc:last-visit and qmc:used:*

Avoid repeated counting within the intended visit or use window.

30 minutes or end of session

qmc:exclude-owner-visits

Excludes the browser used by the owner in the administration area from visit counts.

Until site data is cleared in the browser

Support reminders

Locally count openings and honour “Not now” or the pause following a contribution.

20 or 90 days, depending on the action

Community identifier

Random device identifier used to limit repeated votes and abuse.

Until site data is cleared from the browser

Local calculator data

When a feature offers save or print, data stays on the device and is not automatically sent to CalcuPop.

Until cleared by the user or browser

The PayPal module loads only when you select PayPal. Selecting Stripe opens its external payment page; CalcuPop does not load a Stripe payment module. Payment providers and sharing services apply their own privacy policies and may use their own technologies.

Providers and recipients

OpenAI Sites and its technical infrastructure, including Cloudflare services used for publishing, security and database functions.
Resend, solely to deliver generic alerts to the controller about new reports and Taste Box enquiries; the alerts contain no data entered by users in the forms.
PayPal or Stripe, only when you open or complete a voluntary contribution.
The social network, messaging app or email program chosen by you to share a link.
Authorities or advisers only where required by law or necessary to protect a right.
Data is not sold or used for behavioural advertising.

International transfers

Some providers may process data outside the European Economic Area. Where applicable, transfers must rely on an adequacy decision, Standard Contractual Clauses or another safeguard recognised by the GDPR.

Your rights

You can email privacy@calcupop.com. Depending on the circumstances, you may request:

privacy@calcupop.com

access to and a copy of your data;
rectification or completion;
erasure;
restriction of processing;
objection to processing based on legitimate interests;
data portability, where applicable;
withdrawal of consent, if a future activity relies on consent.

You may also lodge a complaint with the Italian Data Protection Authority. Requests are normally answered within one month, except where the GDPR allows otherwise.

Children

The site does not intentionally ask children to submit personal data. Calculators concerning children or pregnancy normally process values in the browser. Public forms should be used by an adult.

Security

Proportionate technical and organisational measures are used, including restricted administrative access, origin checks, moderation and abuse controls. No online service can guarantee absolute security.

Updates

This notice will be updated when features, providers or processing activities change. The date above identifies the current version.

Legal notice and terms of use

CalcuPop is currently a free information site with calculation tools and a taste-box pilot with no sales.

Results are estimates and do not replace official quotations or medical, tax, legal, financial, veterinary or other qualified professional advice.
Before making an important decision, check the data, formulas, sources and rules applicable to your circumstances.
External links lead to independent services. Trademarks, images and content remain the property of their respective owners.
Except for uses permitted by law, CalcuPop texts, graphics, software, organised formulas, archives and matrices are provided for personal use of the service. Their systematic extraction, cloning, republication or substantial reuse is not authorised without written consent.
The taste-box page only collects expressions of interest and is not an offer for sale, order or payment.
PayPal or Stripe contributions are voluntary and do not purchase goods, services or tax benefits.
The site may not be used to submit unlawful, offensive or promotional content, or third-party data without authority.

Privacy contactprivacy@calcupop.com Italian Data Protection Authoritygaranteprivacy.it ↗PayPal privacy statementpaypal.com ↗Stripe privacy policystripe.com ↗