Privacy Policy

Effective date: {{EFFECTIVE_DATE}}

This Privacy Policy explains how ByteButter, Inc. (“we”, “us” or “our”) collects, uses and shares personal information when you visit storageunitplanner.com or use Storage Unit Planner (the “Service”). We designed the Service to collect as little personal information as possible.

1. The short version

Your storage layouts never leave your browser. We do not upload, see or store them.
We collect your email address so you can subscribe and sign in.
Stripe handles your payment card. We never see or store your full card number.
We use product analytics only if you agree, and you can change your mind at any time.
We do not sell or share your personal information for cross context behavioral advertising.

2. Who is responsible

ByteButter, Inc., {{COMPANY_ADDRESS}}, is the controller of the personal information described in this policy. Contact us at support@storageunitplanner.com.

3. Information we collect

3.1 Information you give us

Email address, when you subscribe through checkout or request a sign in link.
Messages you send us, such as support or privacy requests.

3.2 Information collected through payments

When you subscribe, Stripe collects your payment details and billing information. Stripe shares with us your Stripe customer identifier, your email address, your subscription status and billing history, the last four digits and brand of your card, and your country or postal code where needed for tax. We use these to provide and manage your subscription.

3.3 Information collected automatically

Strictly necessary cookies that keep you signed in and protect checkout. See our Cookie Policy.
Security and server logs, including IP address, browser type, request paths and timestamps, used to operate and secure the Service. We redact sign in tokens, cookies and email addresses from logs.
Bot protection. Cloudflare Turnstile checks that the sign in form is used by a person. It may process device and browser signals.
Cookieless traffic statistics. Cloudflare Web Analytics counts page views without cookies and without identifying you.
Product analytics, only with your consent. If you accept analytics, PostHog records the pages you view and buttons you click on our site and in the planner, together with a pseudonymous identifier. We disable session recording and automatic capture of page text, and we never send PostHog your email address or the names of items in your layouts.
Subscription events. When your subscription starts, renews, changes or ends, our server records that event with PostHog against a pseudonymous identifier derived from your Stripe customer identifier, along with the campaign that referred you (for example a utm_source value). We do this under our legitimate interest in understanding which marketing works and how the business performs. It does not include your email address. You can object at any time by emailing us.

3.4 Information we do not collect

We do not collect your storage layouts, item lists, measurements or anything else you enter into the planner. They are stored in your browser’s local storage on your device. If you export a layout, the file is saved to your device.

4. How we use information and our legal bases

Purpose	Information	Legal basis (where GDPR or UK GDPR applies)
Provide the Service, sign you in, enforce the device limit	Email, Stripe customer id, session cookie	Performance of a contract
Take payment and manage your subscription	Stripe data	Performance of a contract
Send transactional emails (sign in links, receipts, renewal and price notices)	Email	Performance of a contract; legal obligation
Keep the Service secure and prevent abuse	Logs, Turnstile signals, IP address	Legitimate interests
Understand which marketing and features work	Subscription events, campaign parameters	Legitimate interests
Product analytics on site and in the planner	PostHog data	Consent
Comply with law, enforce our terms, defend claims	Any relevant information	Legal obligation; legitimate interests

We do not use your information for automated decisions that have legal or similarly significant effects.

We share personal information only with service providers that process it on our behalf under contracts that require them to protect it, and only as needed for the purposes above. See the full list on our Subprocessors page:

Stripe, which sells subscriptions as merchant of record and handles payments, taxes and subscription management. For purchase and tax records Stripe also acts as an independent controller under its own privacy policy.
Resend for sending email
PostHog for product analytics (only with consent) and subscription event analytics
Cloudflare for hosting (Workers), content delivery, security, bot protection (Turnstile) and cookieless web analytics

We may also disclose information if required by law or legal process, to protect the rights, property or safety of us, our users or others, or in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply.

We do not sell personal information and do not share it for cross context behavioral advertising, as those terms are defined under California law.

6. Retention

Account and subscription records: for as long as you have a subscription and up to 7 years afterward to meet tax, accounting and legal obligations. Stripe keeps payment records under its own retention policy.
Email delivery logs: up to 30 days.
Server and security logs: up to 30 days, longer only when needed to investigate an incident.
Product analytics: up to 12 months.
Support messages: up to 2 years.

7. Your choices

Analytics consent. Use “Your privacy choices” in the site footer to accept or reject analytics at any time.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics and an opt out of any sale or sharing.
Do Not Track. Our analytics respect the Do Not Track browser setting.
Marketing email. We only send transactional and legally required emails. If we ever send marketing email, every message will include an unsubscribe link.

8. Your rights

Depending on where you live, you may have the right to:

access the personal information we hold about you and receive a copy;
correct inaccurate information;
delete your information;
restrict or object to our processing, including processing based on legitimate interests;
data portability;
withdraw consent at any time, without affecting processing before withdrawal; and
opt out of the sale or sharing of personal information and limit the use of sensitive personal information (we do neither).

California residents have the rights described above under the California Consumer Privacy Act, as amended. In the last 12 months we have collected identifiers (email, customer id, IP address), commercial information (subscription history), internet activity (analytics, with consent) and approximate location derived from IP address, for the purposes in section 4, and disclosed them to the service providers in section 5. We do not sell or share personal information and have no actual knowledge of selling or sharing information of consumers under 16. We will not discriminate against you for exercising your rights.

Residents of the European Economic Area and United Kingdom may also lodge a complaint with their local data protection authority.

To exercise a right, email support@storageunitplanner.com from the address on your account. We will verify your request by confirming control of that email address, and respond within the time required by law (generally 30 to 45 days). You may use an authorized agent, who must provide proof of authorization. If we deny your request, you may appeal by replying to our decision, and we will respond within the time required by law.

9. Children

The Service is not directed to children. You must be 18 or older to subscribe, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Security

We protect information with encryption in transit, encrypted and authenticated session cookies, strict access controls, minimal data collection and regular security testing. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International transfers

We are based in the United States and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses or a provider’s certification under the EU-U.S. Data Privacy Framework.

12. Changes to this policy

We may update this policy from time to time. If we make a material change, we will notify you by email or a notice on the site before it takes effect. The effective date at the top shows when it was last changed.

13. Contact

ByteButter, Inc.
{{COMPANY_ADDRESS}}
support@storageunitplanner.com