Privacy Policy

1. Introduction & Foundational Privacy Architecture

At Maintenance Calories Calculator ("we," "our," or "the Platform"), accessible via maintenancecaloriescalculator.org, protecting the privacy, autonomy, and confidential health metrics of our visitors is our paramount commitment.

This Privacy Policy articulates the types of information we process, our strict architectural limitations against data harvesting, our adherence to global privacy mandates—including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and the UK Data Protection Act 2018—and your rights regarding any voluntary communication with us.

2. Information Categories We Process (and Do Not Collect)

2.1 Biometric, Anthropometric & Health Data

We do NOT collect, harvest, store, or transmit biometric identifiers, physical measurements, or health variables. We maintain no user database, no authentication systems, and no user profiling records.

2.2 Voluntarily Provided Communications Data

If you voluntarily submit an inquiry through our Contact Form or write directly to our official email address (semanticsearch.ai@gmail.com), we process:

• Your full name or chosen moniker;
• Your return email address;
• The subject line and free-form contents of your message.

This information is utilized solely to respond to your inquiry, troubleshoot reported computational anomalies, or provide technical assistance. It is never merged with behavioral data, added to unsolicited marketing lists, or disclosed to third parties.

2.3 Automated Technical & Server Log Information

Like virtually all web properties, our edge hosting infrastructure (provided by Vercel) automatically logs standard, non-personally identifiable technical telemetry to maintain network integrity:

• Internet Protocol (IP) address (anonymized/truncated where required by law);
• Browser type, engine version, and operating system;
• Referring URLs and exit pages;
• Date, time stamp, and HTTP request status codes.

This technical data is processed strictly for diagnostic error tracing, DDoS mitigation, and server capacity provisioning. It is never utilized to identify individual visitors.

3. Cookies, Local Storage & Tracking Technologies

Maintenance Calories Calculator maintains an aggressive anti-tracking stance:

• No Third-Party Advertising Pixels: We do not deploy Meta Pixel, Google Remarketing, TikTok tracking tags, or cross-site fingerprinting scripts.
• Essential Functional State Only: We may utilize lightweight local storage (or essential cookies) exclusively to preserve your voluntary interface preferences:
  • Your dark mode / light mode theme toggle;
  • Your preferred measurement unit system (Metric vs. Imperial);
  • Your selected display language.
• No Data Monetization: We do not sell, rent, license, or trade your usage patterns or device data to data brokers, advertising consortiums, or commercial entities.

4. Legal Bases for Data Processing (GDPR Articles 6 & 9)

For individuals residing within the European Economic Area (EEA), United Kingdom, or Switzerland, our processing of data relies on the following lawful bases:

• Legitimate Interests (Art. 6(1)(f) GDPR): To ensure server stability, defend against malicious cyber threats, and maintain edge network security.
• Consent (Art. 6(1)(a) GDPR): When you voluntarily submit a message to our support desk via our contact form or direct email.
• Special Category Data (Art. 9 GDPR): Because all biometric calculations execute locally on your hardware without server ingestion, we do not process Special Category Health Data on our systems.

5. California Privacy Rights (CCPA / CPRA / CalOPPA)

Under the California Consumer Privacy Act as updated by the California Privacy Rights Act (CPRA), California residents are afforded specific statutory rights:

• Right to Know: You may request disclosure of what personal information categories we have collected over the preceding 12 months.
• Right to Delete: You may request the erasure of any personal communication records we maintain concerning you.
• Right to Non-Discrimination: We do not alter service availability, deny access, or degrade calculator performance if you exercise your statutory privacy rights.
• Sale or Sharing of Personal Information: We do NOT sell or share personal information for cross-context behavioral advertising. We have never sold consumer data and will never do so.

6. Third-Party Infrastructure Providers

We partner exclusively with reputable, privacy-certified infrastructure vendors to host and deliver our application:

• Vercel Inc.: High-performance serverless deployment and edge network caching. Vercel adheres to SOC 2 Type II compliance and ISO 27001 data protection protocols.
• Web3Forms / Cloud Email Transport: Encrypted API dispatch for voluntary contact form submissions, operating under standard data processing agreements.

We do not embed third-party advertising networks, affiliate tracking scripts, or data-broker SDKs.

7. Data Retention & Erasure Schedule

• Biometric & Calculator Inputs: Retained for 0 seconds on our servers. Data exists purely in ephemeral browser memory.
• Contact Email Communications: Retained only for as long as necessary to address your inquiry (typically up to 90 days), after which correspondence threads are permanently purged.
• Edge Diagnostic Server Logs: Rotated and automatically overwritten on a 30-day retention cycle by our hosting infrastructure.

8. Children's Online Privacy Protection (COPPA)

Our platform is intended for adult nutritional education and sports science modeling. We do not knowingly solicit, collect, or store personal information from children under the age of 13 (or under 16 within the European Union). If we become aware that a minor has submitted personal information through our contact form, we will immediately delete that record from our systems.

9. Cryptographic & Operational Security

All communication between your client device and our edge servers is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS). We enforce strict HTTP Strict Transport Security (HSTS) headers, robust Content Security Policies (CSP), and defensive cross-site scripting (XSS) protections to eliminate unauthorized code injection.