Privacy Policy

Effective Date: December 18, 2025 | Last Updated: December 18, 2025

1. Introduction

This Privacy Policy details our practices regarding information handling on Yasir Calculators (the "Website"). We are dedicated to safeguarding your privacy through a zero-data collection model, incorporating privacy-by-design and privacy-by-default principles. This approach minimizes risks and ensures compliance with international data protection regulations. Our policy is crafted to be transparent, comprehensive, and aligned with best practices recommended by Google for user trust and data security.

We regularly review and update our practices to maintain the highest standards of privacy protection. This policy applies to all users worldwide and is designed to meet or exceed requirements from major jurisdictions.

2. Information We Collect

We collect no personal information whatsoever. Our Website is engineered to function without any user data gathering mechanisms:

• No user accounts, registrations, profiles, or authentication systems
• No cookies, local storage, session storage, or any persistent identifiers
• No tracking technologies such as pixels, beacons, or fingerprinting
• No collection of personal identifiers including but not limited to names, email addresses, IP addresses for profiling, or device IDs
• No analytics, heatmaps, or user behavior tracking
• No automated logging of user interactions beyond essential server maintenance
• No geolocation, browser history, or referral data collection
• No integration with advertising networks or data brokers

All inputs you provide to our calculators are processed exclusively on your device and are never transmitted, stored, or analyzed. This zero-collection policy eliminates privacy risks associated with data handling.

3. How Our Website Works

Our calculators leverage client-side JavaScript for all computations, ensuring no data leaves your browser:

• User-entered data remains confined to your device memory during the session
• No server-side processing, storage, or logging of calculations or inputs
• Data is automatically cleared upon page refresh, closure, or navigation
• No use of web storage APIs that could persist data across sessions
• Support for private browsing modes without any functionality loss

This local-processing model aligns with Google's emphasis on user control and data minimization, reducing exposure to potential breaches or unauthorized access.

4. Third-Party Services and Resources

To maintain functionality while upholding security, we use limited third-party Content Delivery Networks (CDNs). These are selected for their strong privacy practices:

• Bootstrap (via jsDelivr): Provides UI framework; no data tracking involved
• Font Awesome (via Cloudflare): Supplies icons; operates without user data collection
• MathJS (via Cloudflare): Enables mathematical computations; purely functional library

We implement Subresource Integrity (SRI) hashes to verify resource authenticity and prevent tampering. Our Content Security Policy (CSP) restricts loading to approved sources only. No user data is shared with these providers, and we monitor their privacy policies for ongoing compliance. In line with Google policies, we avoid services that could introduce tracking.

5. Server and Access Logs

For operational security, our hosting infrastructure may generate minimal technical logs:

• Fully anonymized IP addresses (last octets masked)
• Access timestamps
• Requested resource paths
• Basic browser user-agent information
• HTTP response codes and referrers (if applicable)

These logs are retained for no longer than 14 days and used solely for detecting security threats, debugging issues, and maintaining service reliability. They are never used for marketing, user profiling, or shared with third parties except as required by law. This minimal logging complies with Google's guidelines for essential operational data.

6. Security Measures

We employ comprehensive security protocols to protect the Website and its users, even in our zero-data environment:

• Encryption: Mandatory HTTPS with modern TLS protocols for all connections
• Content Security Policy (CSP): Strict policies to prevent XSS, clickjacking, and unauthorized resource loading
• Subresource Integrity (SRI): Cryptographic verification of all external resources
• HTTP Security Headers: Including X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, and Strict-Transport-Security
• No External Scripts or Analytics: Eliminating risks from third-party code
• Regular Security Audits: Periodic vulnerability scans and code reviews
• Input Sanitization: Robust client-side validation to prevent potential exploits
• Rate Limiting and Bot Protection: To mitigate DDoS and abuse
• Secure Development Practices: Following OWASP guidelines and Google's security best practices

In the unlikely event of a security incident, we have protocols to notify affected users promptly, though our no-data model minimizes impact.

7. Your Privacy Rights and Choices

Our design inherently respects all privacy rights without need for user action:

• Right to Access: No data held, so nothing to access
• Right to Rectification/Deletion: No stored data to modify or delete
• Right to Opt-Out: No tracking or marketing to opt out from
• Right to Data Portability: All computations are local and exportable by you
• Browser Controls: Fully compatible with incognito mode, VPNs, and privacy extensions
• Do Not Sell/Share: No data sales or sharing occur

We comply with GDPR (as a non-processor), CCPA (as non-business under threshold), and similar laws globally. For California residents, we do not "sell" personal information as defined by CCPA.

8. Children's Privacy

Our Website poses no privacy risks to children and fully adheres to COPPA, GDPR-K, and equivalent regulations. Without data collection, parental consent is unnecessary. We encourage educational use under adult supervision where appropriate.

9. International Users and Data Transfers

With no data collection or transfers, users from any location can access our Website without cross-border privacy concerns. We ensure compliance with international standards, including adequacy decisions where applicable.

10. Data Breach Response

Although we hold no personal data, we maintain a incident response plan:

• Rapid assessment and containment
• Notification to users via website banner if any risk exists
• Cooperation with authorities
• Post-incident review and improvements

This proactive approach aligns with Google's recommendations for security incident management.

11. Accessibility and Inclusivity

We strive for WCAG compliance to ensure our privacy policy and Website are accessible to all users, including those with disabilities. If you encounter accessibility issues, please contact us.

12. Changes to This Privacy Policy

Policy updates will be handled transparently:

• Posted revisions with clear change logs
• Effective date updates
• Prominent notices for material changes
• Version history maintenance
• Consent requirements for any future data practices

Continued use after changes implies acceptance. We recommend bookmarking this page for reference.

13. Contact Information

For privacy-related inquiries, feedback, or complaints:

Email: equide70@gmail.com
Address: Haveli Lakha, Okara, Punjab, Pakistan

We commit to responding within 7 business days, exceeding many regulatory requirements.