Privacy Policy

Welcome to SuparMax (accessible at https://suparmax.com). This Privacy Policy explains our uncompromising approach to digital privacy. When you use our payroll, wage conversion, and salary tools, we believe your personal compensation figures, hourly rates, and financial inquiries should remain strictly confidential.

Unlike commercial personal finance websites that monetize visitor attention through advertising tracking, identity brokers, and audience retargeting pixels, SuparMax is engineered under the principle of Privacy by Architecture. We do not require accounts, we do not set tracking cookies, and we do not process your salary computations on remote servers.

1. Plain-English Summary

2. Information We Do NOT Collect

To ensure complete clarity and legal transparency under global data protection frameworks, SuparMax explicitly declares that we do NOT collect, harvest, aggregate, or store any of the following categories of data:

• Personal Identity Records: We do not ask for or collect names, home addresses, phone numbers, email addresses, or government identification numbers.
• Financial & Wage Inputs: When you type an hourly rate into our Hourly to Salary Calculator or calculate tax estimates on our Take-Home Pay Calculator, those inputs remain entirely within your browser's temporary memory (RAM). They are never transmitted over the internet to our web servers.
• Persistent User Profiles: We do not maintain user accounts, passwords, or persistent session profiles.
• Digital Fingerprints: We do not deploy canvas fingerprinting, audio API probing, WebGL scraping, font enumeration, or battery status tracking.
• Precise Geolocation: We do not query your device's GPS hardware or request browser location permissions.
• Cross-Site Browsing Habits: We do not track where you came from before arriving at SuparMax, nor do we track what websites you visit after leaving.

3. Information We DO Collect (Minimal Technical Data)

Because SuparMax is delivered across the internet via Cloudflare's global content delivery network, our hosting infrastructure processes only the absolute minimum technical data required for networking and security:

• Selected Currency Key (localStorage): When you click a currency pill ($ USD, € EUR, £ GBP, C$ CAD, ₹ INR, ¥ JPY), your web browser stores a small text preference key (e.g. suparmax_currency="usd") in your device's local browser memory (HTML5 localStorage). This purely technical preference allows your selected symbol to persist when you navigate between our Salary to Hourly Calculator and Overtime Calculator. This key is stored exclusively on your device, is never transmitted to our servers, and can be deleted instantly by clearing your browser cache.
• Transient Server Security Logs (Purged in 24 Hours): When your browser requests a web page, Cloudflare edge servers record standard network packets to safeguard system integrity and defend against automated Denial-of-Service (DDoS) cyberattacks. These transient logs record the request timestamp, requested URI, technical HTTP response code, and browser user-agent string. IP addresses in these security logs are truncated, anonymized, and permanently purged within 24 hours.
• Anonymous Aggregate Metrics: We review server-level aggregate visit counts (e.g., total requests per month to our Bi-Weekly Pay Calculator) without individual identifiers to optimize global caching.

4. Cookies Policy: We Use Zero Cookies

SuparMax does NOT use HTTP cookies of any kind.

We do not set first-party session cookies, persistent tracking cookies, or third-party advertising cookies. Because we operate entirely without cookies or cross-site tracking technologies, you will never encounter an intrusive, screen-blocking cookie banner on SuparMax. Under the EU ePrivacy Directive (Directive 2002/58/EC as amended), storage of functional, non-tracking client-side UI preferences (such as your chosen currency symbol in localStorage) is exempt from consent banner mandates.

5. Third-Party Infrastructure Services

We do not integrate advertising networks, tracking SDKs, or commercial analytics suites. Our external dependencies are restricted exclusively to secure infrastructure hosting:

• Cloudflare Pages (Global Hosting & DDoS Shield): SuparMax is hosted as pre-rendered static HTML files on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare serves our static content from edge data centers globally and provides enterprise-grade TLS encryption and DDoS attack prevention. Cloudflare processes technical network traffic in strict compliance with global security standards (SOC 2, ISO 27001).
• Zero Ad Networks & Zero Trackers: We do not load Google Analytics, Meta Pixel, TikTok tracking, Google AdSense, Amazon Associates, or any behavioral advertising networks.

6. Legal Basis for Processing (GDPR & DSGVO Article 6)

For individuals residing in the European Economic Area (EEA), the United Kingdom, and Switzerland, our processing of transient server logs is governed by Article 6(1)(f) of the General Data Protection Regulation (GDPR / DSGVO):

Legitimate Interests: Processing transient connection metadata for a maximum of 24 hours is strictly necessary for our legitimate interest in maintaining server uptime, debugging network delivery, preventing automated scrapers, and mitigating cybersecurity attacks against our infrastructure.

7. Global User Rights (GDPR Articles 15–22, CCPA, PIPEDA, DPDP)

Under modern data protection frameworks worldwide, individuals enjoy established rights regarding their personal data:

• Right of Access / Right to Know: You may request details on what personal data we hold about you. Because SuparMax collects no personal data, our factual response is always: none.
• Right to Rectification: You have the right to correct inaccurate personal records. Because we store no personal records, no profile data exists to rectify.
• Right to Erasure / Deletion: You have the right to request deletion of your personal data. Because we store no records on our servers, there is nothing to erase. You may clear your stored currency setting anytime by clearing your browser's local cache.
• Right to Restriction of Processing: You have the right to request restriction of personal processing.
• Right to Data Portability: You have the right to obtain your personal records in a structured format.
• Right to Object: You have the right to object to processing based on legitimate interests.
• Rights Regarding Automated Profiling: We do not execute automated profiling, scoring, or decision-making algorithms that produce legal or significant effects.
• Right to Lodge a Complaint: You have the legal right to lodge an inquiry or complaint with your competent data protection authority.

8. Notice to California Residents (CCPA / CPRA Disclosures)

The California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA) require specific statutory declarations:

• We Do NOT Sell Personal Information: In the preceding 12 months, SuparMax has not sold, rented, disclosed, or shared any personal information of consumers to third parties for monetary or valuable consideration.
• We Do NOT Share for Cross-Context Behavioral Advertising: We do not share personal information with third parties for cross-context behavioral advertising.
• Sensitive Personal Information: We do not collect or process sensitive personal information.
• Non-Discrimination: We do not discriminate against any consumer for exercising their CCPA/CPRA rights. You receive full, identical calculator functionality regardless of your privacy preferences.

9. Notice to European Union & United Kingdom Residents

If you access SuparMax from the European Union, European Economic Area (EEA), or the United Kingdom:

• EU Supervisory Authorities: You may lodge a complaint with the supervisory authority of your EU Member State (e.g. the BfDI or regional Landesdatenschutzbeauftragter in Germany, CNIL in France, AEPD in Spain, DPC in Ireland).
• United Kingdom: SuparMax complies with the UK Data Protection Act 2018 and UK GDPR. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Notice to Canadian Residents (PIPEDA Compliance)

For individuals residing in Canada, SuparMax adheres to the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial private-sector privacy acts (Alberta PIPA, BC PIPA, Quebec Law 25). We collect zero personal information, maintain complete transparency regarding technical edge logs, and respect your right to file inquiries with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

11. Notice to Indian Residents (DPDP Act 2023)

For visitors accessing our tools from India, SuparMax respects the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act):

• Data Principal Rights: As a Data Principal, you have the right to access information, seek correction or erasure, and register grievances regarding personal data processing.
• Right of Grievance Redressal: Inquiries may be submitted directly to our Data Protection Team at [email protected].
• Right to Nominate: You have the right to nominate an individual to exercise your rights under the DPDP Act in the event of death or incapacity.
• Data Protection Board of India: You retain the statutory right to approach the Data Protection Board of India if an inquiry is unresolved.

12. Children's Privacy (COPPA & Global Protections)

SuparMax is an informational utility designed for general audiences and working adults. In strict compliance with the U.S. Children's Online Privacy Protection Act (COPPA), GDPR Article 8, and child protection statutes worldwide:

We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 16. Our website requires no account creation, communication profiles, or interactive user uploads. If you are a parent or legal guardian and believe that a minor has submitted personal contact information to our feedback inbox, please contact [email protected] and we will immediately purge the email communication.

13. Do Not Track (DNT) & Global Privacy Control (GPC)

Some web browsers transmit automated "Do Not Track" (DNT) or "Global Privacy Control" (GPC) HTTP headers. Because SuparMax collects zero personal data, maintains zero tracking cookies, and runs zero cross-site advertising scripts, our website honors all DNT and GPC privacy signals inherently by design. Every user receives the same high-security, tracking-free experience by default.

14. International Data Transfers

SuparMax is hosted globally using Cloudflare Pages. Because all mathematical and payroll algorithms execute client-side inside your web browser, your salary computations never cross international borders or land on foreign database servers. Transient server logs processed by Cloudflare are governed by Standard Contractual Clauses (SCCs) and robust international data protection safeguards.

15. Data Retention Schedule

Our retention policy is designed around data minimization:

• Wage & Salary Calculations: 0 seconds. Calculated in RAM on your local machine; never stored on our servers.
• Local Currency Selection: Controlled entirely by you inside your browser's localStorage until you clear your site data.
• Transient Edge Server Logs: Automatically overwritten and purged within 24 hours.
• Voluntary Email Inquiries: If you contact us voluntarily at [email protected], your email correspondence is retained solely to address your query and is deleted periodically.

16. Policy Modifications

We may occasionally update this Privacy Policy to reflect technical enhancements, architectural updates, or evolving statutory requirements across international jurisdictions. When revisions are published, the "Last updated" date at the top of this document will reflect the current revision. We encourage visitors to review this page periodically.

17. Contact the Privacy Team

If you have questions, feedback, or legal inquiries regarding our privacy-first software architecture, please reach our Data Protection Team: