Privacy

What is never collected

You can use the reference site and public API without an account. Results are computed from your input and thrown away; nothing you type is sent to a third party to be interpreted. Optional embed accounts store the account and configuration data described below, but never the values calculated by an embedded tool.

Embed accounts

If you create an account, we store your email address, when it was verified, your registered domain name, its DNS verification status, and which embed tools you chose. We send the one-time sign-in link using Zoho Mail. Verification links expire after 20 minutes; session cookies are HttpOnly, same-site and expire after 30 days. The cookie is strictly necessary to keep you signed in and is not used for analytics.

Embedded calculations are not stored. We keep only a monthly calculation count for each verified domain, and short-lived counters used to enforce rate limits. Those counters contain a SHA-256 digest of the request address, are removed within two days, and are not used to follow visitors. Monthly totals older than 13 months are removed. Account and domain data remain until you delete your account; the control is in the account page. Deletion removes its domains, configuration, sessions, tokens and usage records.

We use the email and configuration to provide the service you requested, and rate counters to prevent abuse and apply the published beta limits. Zoho processes the sign-in email. Account data is held in Nerdulator’s PostgreSQL database on our hosting server.

Analytics

No analytics script is loaded and no analytics cookies are set in this deployment.

What you search for

When you use the search box, the text you typed is recorded along with whether the site could answer it. Nothing that identifies you is stored with it: no IP address, no analytics cookie, no session, no account, and nothing linking one search to another or to you. This happens on the server and does not touch your device, which is why it is not part of the cookie choice above.

It exists for one purpose: inputs the site could not read are the only honest guide to what it should learn to answer next. The report behind it only shows a query once at least two different searches have produced it, so a one-off is never surfaced. Records are deleted after 90 days.

Please do not type anything personal or confidential into the search box. Nerdulator answers questions about numbers, dates, words and measurements, and has no reason to receive anything else.

The API

The public API takes no account, no key and no cookie. What it records about a call is the shape of the call and never the text: which endpoint, which kinds of thing were recognised, how many bytes the input was, the response size, the status, how long it took, and whether it was answered from your cache.

The input itself is not stored. That is deliberate, and it is the difference from the search box above: something sent to an API is far more likely to have come from a file, a database or a page than from somebody typing, so the one useful question — what kinds of object are people inspecting? — is answered by the recognised types alone.

Callers are counted, not identified. Your address is salted and hashed to a short string before anything is written, and the salt is generated fresh every time the server starts, so the value cannot be followed across a restart, let alone tied to you. No IP address is stored. Records are deleted after 90 days.

The Chrome extension

The Nerdulator extension adds a “Nerdulate” item to the right-click menu. When you choose it, the text you selected is sent to this site to be inspected, exactly as if you had typed it into the search box. Nothing else on the page is read, and the extension holds no permission that would let it read one: it receives only what you highlighted.

On your machine the selection is held in the browser’s session storage so the panel can show it, and that is erased when you close Chrome. It is never written to disk, never synced to a Google account, and never sent anywhere but here. The extension sets no cookie, has no analytics of its own, keeps no history and needs no sign-in.

On the server a selection is treated exactly as the API call it is: the recognised types and the byte count are recorded, and the text is not.

Please do not nerdulate anything personal or confidential. The extension cannot know what you have selected before it sends it, and a selection leaves your machine the moment you choose the menu item.

Cookies

No analytics or advertising cookies are set. If you sign in to an embed account, Nerdulator sets a strictly necessary HttpOnly session cookie that keeps you signed in for up to 30 days. It is not used for tracking. No cookie choice is needed for it.

Legal basis and your rights

No consent is asked for because this deployment uses no analytics or advertising cookies. An optional account uses only a strictly necessary sign-in cookie.

Under UK GDPR you have the right to access, correct, erase or object to the processing of your personal data, and to complain to the Information Commissioner’s Office. You can delete embed account data from the account page or email us if you need help with an access or erasure request.

Advertising

The site reserves space in its layout for adverts but ships no advertising script and serves no adverts today. If that changes, this page changes with it and you will be asked again.

Contact

Questions about this policy: dan@01d.co.uk.