Last updated: October 2026.

The one-paragraph version

GPACalc has nothing to log you into and nothing to save to. Courses, credits, grades, weights and targets are typed into the page, computed on by the page, and forgotten when you close the tab — the entire calculator is client-side JavaScript. What follows is a fuller account of the few places data does exist.

Information the site never receives

Course names, credit hours, letter grades, the scale and weighting toggles, and every target-mode number stay inside your browser’s memory. There is no submission step in the code: you can pull the network cable after loading and keep calculating. A practical consequence — no one, including us, can retrieve, leak or hand over figures that were never transmitted.

Information that exists briefly

Hosting logs. Cloudflare serves these pages and, like any web host, records the technical envelope of each request — your IP, browser identifier, when it happened, which page — for delivery, security and aggregate counting. Those records contain URLs, never grade inputs, and we have no account system to tie them to.

Advertising identifiers. If the site shows ads through Google AdSense or similar networks, those third parties may read or set cookies to cap frequency, measure views and personalize creatives where the law allows. You can turn personalization off in Google’s Ads Settings or block third-party cookies outright; calculations are unaffected either way.

Usage statistics. We may consult aggregate, privacy-respecting analytics about page popularity. Typed numbers are not part of any event.

How long anything is kept

Your inputs: zero retention, since they never arrive. Host logs: held briefly by Cloudflare under its own data policies. We neither sell personal data nor possess any that could be sold.

Questions and changes

Write to hello@tolerence.net about anything on this page. If the policy is revised, the new text replaces this one and the date at the top moves forward.

Usage counts

The only analytics here is a small cookieless ping per page view. It sends the page address, the referring site’s domain, the page language and any campaign tag in the link, and when you leave it sends how many seconds the page was open.

When it arrives, our server adds the time, the country and network provider Cloudflare reports, a device type guessed from your browser’s user-agent (phone, tablet, desktop or bot), what kind of source the visit came from, and a label for filtering out automated traffic. For a count of visitors per day, it saves a hash of your IP address, browser, the date and a secret value instead of the IP itself; the hash is different every day. Grades, test results and anything else you enter are not sent, and there are no cookies.