Written from the code rather than from intention. Where something leaves your device, it says so, and says where it goes.
All of it is browser storage on your own machine. It is not transmitted anywhere by the act of storing it, and clearing your site data removes every item.
| What | Why |
|---|---|
| A random identifier | Generated in your browser so repeat reports are not counted as new people. It is a random string and is not derived from anything about you. |
| Your firm block | Firm name, credentials, contact line and your logo, so you do not retype them for every report. This never goes to the usage figures — but see the guide feature below, where it does travel. |
| Your preferences | Role, theme, adjustment defaults, review threshold and the other working settings. |
| Your acknowledgment of the opening terms | With the version you accepted, so you are asked again when the wording changes or after 24 hours. |
| Your email, if you have sent a comment | Only so the form is prefilled next time. |
This site sets none, first-party or third-party. Everything above is local browser storage, which is not transmitted with requests the way a cookie is.
When you press Calculate, a small record is sent so we know the tool is being used. It holds:
No vessel details go into these figures — not the boat, not your comparables, not your client, not any price or concluded value.
Three features send data away, and none of them runs unless you use it.
When you drop a PDF, a screenshot or a photo, that file is uploaded in full to Anthropic's Claude API, which reads the specification out of it and returns the fields. When you paste a listing address instead, the page is fetched on your behalf — the address goes to the fetching service used for that, and the text extracted from the page goes to the same API.
The file, the page and the extracted text are not stored. What is recorded is the shape of the request: when it happened, whether it was an image, a PDF or an address, whether it succeeded, how long it took, the listing's domain name — never the full address — and a one-way fingerprint of your IP address used to enforce rate limits.
The guide can only answer questions about your valuation if it can see it. Your question and a summary of the worksheet go to Anthropic's Claude API: the subject vessel, your comparables and their figures, your settings, and the text of the finished analysis once one has been calculated.
The finished analysis is headed by your firm name, credentials and contact line, so once a report has been calculated those are part of the text that is sent. Your logo is not.
There is no client-name field anywhere in the tool, so a client is named only if you typed one into a field yourself.
The panel asks before the first question, and nothing is sent if you close it.
Nothing about the conversation is stored on this site. There is no server-side history and no log of what anyone asked; the conversation lives in your browser tab and goes when you close it.
The share link works by storing the whole rendered document on the server — firm masthead, vessel, comparables and every figure — behind an unguessable address, so another device can open it.
A shared document is set to last 45 minutes, but that is enforced when the link is opened: it is checked and deleted at that moment. A share link that nobody ever opens is not deleted by anything. Treat a share as a copy you have put somewhere, not as something that reliably disappears on its own.
The feedback form asks for an email address because the answer is usually a two-line reply rather than a change to the tool. When you send a comment we store the message, the address, the name you gave, which mode you were in, your browser's user-agent string, and the partner code.
The address is joined to the record already held for your browser, which turns a count of reports into a person who has run some reports and asked a question. That is what makes a useful reply possible, and it is the most identifying thing here, so it is worth stating plainly.
It is never sold and never used for marketing, and it is not sent to any third party — there is no mailing service in the loop.
| Who | When | What they can see |
|---|---|---|
| Google Fonts | Every page load, before the opening terms are accepted | Your IP address, browser and the page address, in order to serve the typefaces. |
| Cloudflare (cdnjs) | Every page load, before the opening terms are accepted | Your IP address and browser. The requests are configured not to reveal which page asked for them. |
| Anthropic | Only when you read a file or listing, or ask the guide | What is described above. Requests are made by our server, so your IP address is not passed on. |
| The listing fetching service | Only when you paste a listing address | The address you pasted. Requested by our server, not your browser. |
| Stripe | Only if you click the tip link | Everything that follows is on Stripe's own page. No card details ever pass through this tool. |
| A partner's logo host | If you arrived through a partner's branding | Your IP address, because the logo is loaded from their site. |
Typefaces and the file-reading libraries load before you have accepted anything. That is a consequence of how the page is built rather than a choice about you, but it means those two see your address on any visit, including one where you go no further.
Honestly: indefinitely, with one exception.
Everything held in your browser — the worksheet, your firm block, your preferences and the random identifier — goes when you clear this site's data in your browser settings. Nobody else needs to be involved.
Anything held on the server is the record described above: report counts against your random identifier, and any comment you sent with its address. There is no self-service button for this. Ask through the Send feedback link in the worksheet and we will delete it.
If you find a sentence on this page that does not match what the tool actually does, the feedback link in the worksheet is the fastest way to have it corrected.