Cloistr ("Cloistr," "we," "us") is operated by Hamza, an individual based in Morocco. This policy explains what information Cloistr collects when you visit cloistr.io, how it's used, and the rights you have over it. It applies to every page on the site.
The short version
Every calculator and generator on Cloistr runs entirely in your browser. When you enter numbers into the VAT calculator or details into the invoice generator, that information is never sent to, or stored on, any Cloistr server — it exists only on your device, for as long as your tab is open. Separately, we use Google Analytics to understand overall traffic to the site, which does involve some data collection described below.
Information the tools themselves collect
None. Cloistr's tools (the VAT calculator, invoice generator, tax estimator, and every other tool on the site) are static, client-side utilities. There is no account system, no server-side database, and no backend that receives or stores the values you enter. Anything you type into a tool stays in your browser and disappears when you close or refresh the page.
Information collected automatically
We use Google Analytics (GA4) to understand how visitors use Cloistr in aggregate — which pages are popular, which countries visitors come from, and which channels (search, direct, referral) bring people to the site. This involves:
- Standard web analytics data: pages viewed, approximate location (city/country level), device and browser type, and referring site.
- Cookies and similar technologies set by Google Analytics to distinguish sessions and returning visitors.
This data is aggregated and used to improve the site; we do not use it to identify individual visitors. Google's own privacy practices for Analytics are described at policies.google.com/privacy.
Google Analytics does not load until you consent. On your first visit, a cookie banner asks whether you accept analytics cookies. Nothing from Google Analytics runs before you choose. You can change your decision at any time using the "Cookie preferences" link in the footer of any page.
Cloistr also stores a single, non-personal preference in your browser's local storage: your light/dark theme choice. This never leaves your device and is not a cookie.
Legal basis for processing
Where GDPR applies, our legal basis for using Google Analytics is your consent (Article 6(1)(a) GDPR), collected via the cookie banner described above. You can withdraw that consent at any time, as easily as you gave it, with no effect on your ability to use any tool on the site. Where no analytics consent is given, no analytics cookies are set and no data is sent to Google Analytics.
International data transfers
Google Analytics is operated by Google, which processes data on servers located in the United States and other countries outside the EEA/UK. Where this involves a transfer of personal data out of the EEA or UK, Google relies on Standard Contractual Clauses approved by the European Commission as the transfer safeguard. You can read more about Google's approach at policies.google.com/privacy/frameworks.
Advertising and affiliate links
Cloistr intends to display advertising (via Google AdSense) and, on select blog posts, affiliate links to third-party products relevant to freelancers and small businesses. When these are live, this section will be updated to describe the specific third parties involved and the cookies or tracking they set — for example, Google AdSense uses cookies to serve and measure ads, which may involve personalized advertising depending on your settings and region. Affiliate links, when added, may use tracking parameters to attribute referrals; clicking one does not share any additional personal information beyond what your browser already sends when visiting any external site.
Third-party services we use
- Google Analytics — aggregate traffic analytics.
- Vercel — hosting and content delivery for cloistr.io.
- Google Fonts — web font delivery.
- cdnjs (Cloudflare) — delivers the PDF-generation library used by the invoice generator.
Each of these third parties may process limited technical data (such as your IP address) as part of delivering their service, governed by their own privacy policies.
Your rights under GDPR
If you are located in the European Economic Area or the UK, you have the right to: access the data we hold about you, request correction or deletion of it, restrict or object to its processing, request a copy in a portable format, and lodge a complaint with your local data protection authority. Because Cloistr's tools don't collect personal data server-side, most requests will relate to analytics data; contact us using the details below and we'll respond within a reasonable timeframe.
Your rights under CCPA
If you are a California resident, you have the right to know what personal information is collected about you, request its deletion, and opt out of the "sale" or "sharing" of personal information. Cloistr does not sell personal information, and since Google Analytics only runs after you've given consent, there is nothing collected by default to opt out of. You will not be discriminated against for exercising any of these rights.
Children's privacy
Cloistr is not directed at children under 13, and we do not knowingly collect personal information from children.
Data retention
Analytics data is retained according to Google Analytics' standard retention settings. No data entered into the tools themselves is retained anywhere, because it is never transmitted off your device.
Changes to this policy
We may update this policy as Cloistr grows — for example, when advertising or affiliate partnerships go live. Material changes will be reflected by updating the "Last updated" date above.
Contact
Questions about this policy or requests regarding your data can be sent to hello@cloistr.io.