Privacy Policy

Last updated: September 12, 2026

This notice covers the HacksDomain website, including the Cost Per Use (CPU) Calculator and its optional Google Drive backup. HacksDomain is operated by Hazoncorp Solution LLP from Mumbai, Maharashtra, India. “We” means Hazoncorp Solution LLP. Contact us at support@hacksdomain.com about privacy, a grievance or your data.

What stays on your device

Financial calculations, JSON formatting, text transformations, word counts, time cards, card-number checksums, QR generation and QR scanning process inputs in your browser. Image-to-text recognition uses OCR software and an English language model served by this website; the image and recognized text are processed on your device, without an image upload to us or an OCR provider.

QR camera access begins only after you request it and grant browser permission. Camera tracks stop when scanning finishes, when you stop scanning, or when the page is hidden or left. You can also revoke camera permission in your browser. A Wi-Fi QR code contains the credentials you enter; anyone who receives that code may be able to read them.

CPU stores item names, descriptions, costs, usage counts, attendance or absence dates, date ranges and goals in this browser. The home-loan calculator stores up to five named scenarios only when you choose Save current. The notepad saves a title and text only if you enable Save on this device; disabling it removes the saved copy while keeping your open note. Theme and time-format preferences are also stored locally.

Local storage belongs to this browser profile and can be read by someone with access to it. It does not automatically sync through a HacksDomain account. Clearing site data may permanently remove saved work. The site also caches public pages, scripts and other assets for offline use. Browser or operating-system backups are controlled by their own settings.

The subnet, password, encoding, building, fitness, math, statistics and geometry tools calculate locally. Their inputs and results are not sent to our servers or added to share URLs by these tools. This includes body measurements, data sets, expressions and generated passwords. These tools do not save that content to browser storage; it remains in the open page until you clear it or leave. Copying or downloading creates a copy under your control. Do not paste existing passwords or other secrets into unrelated tools.

Shared links and downloads

Some calculator Share buttons put calculation inputs and the selected strategy into a link. Anyone with the link can read those inputs. Links can appear in browser history, messages and hosting access logs. Home-loan scenario names and XIRR cash flows are excluded from their share links. Review a link before sending it. Files downloaded by tools are created locally; files you later send or upload are handled by the recipient.

Lookups that contact other services

These features send information only when you request the relevant lookup or follow an external search link. A directly contacted provider receives your IP address and normal browser connection information as well as the lookup value. Its own privacy policy and service terms also apply.

• BIN lookup: sends only the six-digit card prefix to CardBinCheck. Full card numbers entered in the separate card-checksum tool stay local. Do not submit security codes or banking credentials.
• Domain registration: sends the domain to RDAP.org, which directs the request to the relevant registration-data service. Returned records may contain publicly available registration information.
• Username checks: send the username to GitHub and GitLab. Instagram, X, YouTube and Reddit profile links open their respective services when selected.
• BIMI: sends the domain and selector as a DNS query to Google Public DNS.
• Reverse image search: a selected link sends your public image URL to Google Lens, Bing or TinEye. Local image uploads happen on the selected provider’s website. Review Google’s privacy policy, Microsoft’s privacy statement or TinEye’s privacy policy before using that service.

Worldwide DNS checks send the hostname, record type and selected resolver identifiers to our server. It queries the public resolvers named in the DNS tool. These providers receive the DNS question and our server’s network address. Browser mode sends the query directly to Google or Cloudflare over HTTPS. The DNS endpoint does not persist query names or answers; a hostname query may itself reveal sensitive information, so avoid private or confidential names.

The internet speed test sends generated traffic to and from our hosting server when started. It uses about 10 MiB of test data, plus connection overhead. Uploaded test bytes are discarded. It does not upload your files or contact an external speed-testing service.

Optional Google Analytics

Analytics stays off until you choose Allow analytics. You can decline and use all tools. Choose Analytics preferences in the footer at any time to change your choice or withdraw consent. Google’s analytics library is not requested before opt-in.

We measure page visits and fixed tool-action categories, including successful actions, validation problems, page errors, related-tool navigation, sharing, and download or print requests. These events exclude entered amounts, cash flows, pasted text or JSON, card numbers, image contents, OCR results, item names, DNS queries, lookup answers, body measurements, generated passwords, calculator expressions, data sets, raw errors, and page query strings or fragments. Referrals use broad categories instead of full referring URLs.

Google may process cookie identifiers and technical information, including device, browser and approximate location, when analytics is allowed. Our integration disables Google signals and advertising-personalization signals. See how Google uses information from sites using its services.

Analytics cookies named _ga and _ga_… are configured to expire after 90 days without extending their expiry on each visit; new cookies may be created on later consented visits. Your allow/decline preference is stored locally for up to 180 days. Withdrawing consent disables subsequent analytics events from this integration and deletes accessible analytics cookies. This does not delete events already received by Google. Cookie expiry is separate from Google Analytics server-side retention, described below.

Optional Google Sign-In and Drive backup

Google sign-in requests your profile and email, plus permission to use this app’s hidden Google Drive application-data folder. It does not request access to your ordinary Drive files. The browser stores profile details and backup preferences locally to show signed-in status. Google access tokens are held in the open page’s memory and are cleared on reload or logout; older stored tokens are removed when the updated CPU page opens. You may need to sign in again before a backup or restore.

Back up now sends your CPU items, theme and backup timestamp directly to your Google Drive. Restore from Drive reads that backup into the tool. Daily auto backup is optional and runs at most once per day while the page is open and Google authorization is available. The website does not hold a separate server copy of these backups.

Google account and Drive data are used to provide sign-in, backup and restore, not for advertising, sale, credit decisions or training general-purpose AI models. HacksDomain’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Logout is not deletion. Logout removes the locally saved Google profile and ends this page’s session, but keeps local CPU items and the existing cloud backup. To remove cloud data, turn off auto backup on your devices, then open Google Drive settings, choose Manage apps, find this app, and use Options → Delete hidden app data. You can separately remove authorization in Google Account connections. See Google’s storage-management help. Clearing browser data alone does not delete the Drive backup.

Hosting, support and reasons for processing

Namecheap, our hosting provider, processes connection data needed to deliver pages and requested server tools, including IP addresses, request paths, browser headers, timestamps and error information. Access logs may include query strings in shared calculator URLs. DNS and speed endpoints use hashed client identifiers and request timestamps to limit abuse. Hashing these identifiers does not make them anonymous.

If you email support, we and Zoho, our email provider through zoho.in, receive your address, message and any attachments to answer the request and resolve the issue. Avoid passwords, full payment-card details and private financial documents. We do not sell personal information or use it for targeted advertising. Service providers, recipients you select and authorities where disclosure is legally required may receive the information relevant to those purposes.

Where the EU or UK GDPR applies, the reasons for processing are consent for optional analytics and Google connection; providing the service you request for necessary tool operations; our legitimate interests in secure operation, abuse prevention and responding to support requests; and compliance with applicable legal obligations where required. Supplying optional data is voluntary. A lookup cannot run without its query, and a support reply requires a way to contact you. Calculator outputs are not automated decisions by us about your legal rights, lending eligibility or access to services.

How long information remains

• Local items, scenarios, notes and preferences: until you remove them using the tool or clear site data, subject to browser storage eviction. Downloaded files remain wherever you save them.
• Consent preference: up to 180 days; analytics cookies are configured for 90 days. Google’s separate event-retention controls do not govern all aggregated reports. See Google Analytics retention. The property’s server-side retention period is configured in the Google account, not by this website’s cookie setting.
• CPU profile: until logout or clearing site data. Drive backup remains until replaced or deleted in your Google Drive, subject to Google’s retention practices.
• DNS and speed rate limits: entries older than 60 seconds are removed on the store’s next access. If no further request arrives, the stored file may remain until a later request or server cleanup. These endpoints do not keep lookup histories or uploaded speed-test content.
• Hosting logs and support messages: retention depends on hosting and email account settings and the need to resolve requests, investigate security issues and meet applicable legal requirements. Contact us for information about records relating to you.

International processing and security

Hosting, Google and the other providers listed above may process information outside your country. Countries can have different data-protection laws. Provider policies explain their processing locations and transfer arrangements. You can contact us for information about safeguards relevant to our use of a service. Opening an external service does not waive your privacy rights.

The public website uses HTTPS. Local processing, limited Google permissions and opt-in analytics reduce the information transmitted, but no browser, device or online service is risk-free. Keep your device and browser secure, and save your own copy of important work.

Your choices and privacy rights

You can withdraw analytics consent in the footer, revoke camera permission in your browser, delete local tool data and manage Google access and backups as described above. Withdrawal does not affect the lawfulness of processing before it was withdrawn.

Depending on the law that applies to you, you may have rights to access, correct or erase personal information, receive a portable copy, restrict processing or complain to a data-protection authority. You may also object to processing based on legitimate interests. Rights and exceptions depend on the processing and applicable law.

Email support@hacksdomain.com with “Privacy request,” the tool involved and the request you want us to address. We may ask for proportionate information to verify your identity or locate relevant records; do not send identity documents unless needed and requested. We respond within the applicable statutory period and explain any lawful limitation or extension. We cannot retrieve local-only browser data remotely or identify all past analytics events from an email address alone.

You can complain to your local data-protection authority without first contacting us. UK users can contact the ICO; EEA users can find their authority through the European Data Protection Board.

For Indian privacy grievances, use the same email address with “Privacy grievance” in the subject. Where India’s Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 apply, we will address the grievance within one month of receipt. You may request review or correction of information you provided and send a written withdrawal of consent to this address. Withdrawal may prevent a feature that needs that information from operating.

Children and changes to this notice

The website is a general-purpose service and is not directed to children under 13. If you believe a child has supplied personal information to us without permission required by applicable law, contact us so we can investigate and address it. A statement about the intended audience does not replace protections required by local law.

We will update this page and its date when practices change. Material changes will be brought to users’ attention, and fresh consent will be requested where required before a new consent-based use. See also our Terms of Service.