Privacy Policy

What this policy covers

This Privacy Policy explains how SourcedKit ("we," "us," "SourcedKit") handles information when you visit sourcedkit.com or any of its calculator pages, or subscribe to our newsletter. It applies to all visitors and subscribers regardless of location.

What SourcedKit does not collect

SourcedKit is built to collect as little personal information as possible. We do not:

• Require user accounts to use any calculator
• Store calculator inputs or outputs on our servers (all calculations run in your browser)
• Process payments or store payment information
• Set first-party advertising or tracking cookies
• Run third-party analytics tools (such as Google Analytics, Meta Pixel, or Hotjar)
• Sell, rent, or share your personal information with third parties for marketing
• Build profiles for behavioral advertising

What information SourcedKit collects directly

The only personal information SourcedKit collects directly is your email address, and only if you actively choose to subscribe to our newsletter using the subscribe form. We collect the email you submit and any preferences you indicate at signup. We do not collect your name unless you provide it.

What information third parties collect on our behalf

SourcedKit uses third-party service providers to operate the site. Each service may collect technical information when you visit:

• Vercel (hosting provider). Collects standard server logs including IP address, browser user agent, request paths, and timestamps for security and performance monitoring. Vercel's privacy practices are documented at vercel.com/legal/privacy-policy.
• Cloudflare (DNS and security provider). Routes traffic to our origin server and may collect IP address, request metadata, and security event information. Cloudflare's privacy practices are at cloudflare.com/privacypolicy.
• Buttondown (newsletter service). When you subscribe to our newsletter, your email and any signup metadata are processed by Buttondown under their privacy terms at buttondown.com/legal/privacy. Buttondown sends a double opt-in confirmation email before adding you to the list, and handles unsubscribe requests directly.

How long SourcedKit keeps your information

Newsletter subscribers remain on the list until they unsubscribe. You can unsubscribe at any time using the link at the bottom of every newsletter email, or by emailing info@sourcedkit.com. When you unsubscribe, your email is removed from active sends but may remain in Buttondown's suppression list to prevent re-adding by mistake.

Server logs collected by Vercel and Cloudflare are retained per their respective standard retention schedules (typically 30 to 90 days for security event data).

How SourcedKit uses your information

We use your email address only to send the SourcedKit newsletter: calculator launch announcements, updates when manufacturer terms or authority guidance changes, and occasional editorial content. We do not use your email for promotional advertising, behavioral retargeting, or lead-generation sales.

Does SourcedKit use cookies?

SourcedKit does not set first-party cookies. Cloudflare may set technical cookies required for security and DDoS protection. These cookies do not track you across sites and are not used for advertising.

How does SourcedKit handle children's information?

SourcedKit is intended for adults 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EU). If you believe a child has subscribed to the newsletter, email info@sourcedkit.com and we will remove the address within 7 days.

What rights do you have over your information?

Depending on where you live, you have specific rights over your personal information:

• European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR / Swiss DPA). You have the right to access, correct, delete, restrict processing of, and port your personal data. You may also withdraw consent at any time by unsubscribing.
• California (CCPA / CPRA). You have the right to know what personal information SourcedKit has, request deletion, opt out of any sale or sharing (we do not sell or share), and not be discriminated against for exercising these rights.
• Canada (PIPEDA). You have the right to access your personal information, request corrections, and file a complaint with the Privacy Commissioner of Canada at priv.gc.ca.
• Other jurisdictions. SourcedKit honors equivalent rights for residents of states and countries with comparable privacy laws, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA).

How to exercise your rights

Email info@sourcedkit.com with your request. Include the email address you used to subscribe so we can locate your data. We respond to verified requests within 30 days. We do not require an account or any special form, and we do not charge for privacy requests.

How does SourcedKit handle international data transfers?

SourcedKit is operated from Canada. Our service providers (Vercel, Cloudflare, Buttondown) operate globally. When you submit your email, your data may be transferred to and processed in jurisdictions including the United States, the European Union, and elsewhere. Each provider maintains appropriate safeguards (such as Standard Contractual Clauses) for international transfers as required by applicable law.

How will SourcedKit notify you of changes to this policy?

We update this policy as our practices or applicable laws change. Material changes will be communicated by email to active subscribers at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Who to contact about privacy

For any privacy question, request, or concern, email info@sourcedkit.com. We acknowledge requests within 48 hours and provide a substantive response within 30 days.