Privacy Policy

1. Who we are

RahaKit (rahakit.com) is the business behind the products and website described here. For the personal data we receive ourselves — support emails and the order and licence information passed on to us — RahaKit decides how it is used and is responsible for it. Lemon Squeezy, Etsy, Cloudflare and Google handle some data in their own right, as described below.

We do not have a data protection officer. Privacy questions, requests and complaints all go to the same address: .

2. What each product stores, and where

TypeCrux (Chrome extension, text expander). Your snippets, settings and usage statistics are stored locally in your browser, on your device. The statistics are kept in full, and also only locally. TypeCrux has an optional Vault. If you turn it on, your snippets are encrypted on your device with AES-GCM. The encryption key is derived from your password (using PBKDF2) and exists only in your browser session's memory. It is never sent anywhere, so we do not have your password or key and cannot read or recover Vault contents. TypeCrux reads the page only to detect the shortcut you type and to insert the expansion. It does not collect, store or transmit page content or keystrokes.

Tabcrux (Chrome extension, session and tab manager). Your windows, tabs and sessions are stored locally in your browser. There is no account, no telemetry and no network call about you.

Shotcrux (Chrome extension, screenshot tool). Captures are created and stored locally. Nothing is uploaded.

Excel workbooks. Our 37 workbooks are plain spreadsheet files. They contain no tracking, no macros that phone home and no data collection of any kind. What you type into a workbook stays in your file.

Because this information is on your device, we cannot see it, recover it or delete it for you. It stays under your control.

3. TypeCrux licence validation

The only network call TypeCrux makes about you is licence validation. It sends your licence key and an activation (instance) identifier to the Lemon Squeezy licence API, over an encrypted (HTTPS) connection, so that the licence you bought can be checked. It never sends snippet content or typed text, and we do not combine the result with any other information about you. Lemon Squeezy handles that information under its own privacy policy.

Limited Use. The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Extension data is used only for the disclosed functionality and permitted related purposes. It is not used for personalised advertising, unrelated monetisation or creditworthiness decisions.

4. Free web tools

The free tools at rahakit.com/tools, such as the Etsy Fee Calculator, run entirely in your browser. What you enter, and any file a tool works on, is processed on your device and is never uploaded to a server. (Loading a tool page still involves the ordinary website delivery described in the next section; the tool's own processing adds nothing to it.)

5. The website

• Hosting and logs. rahakit.com is hosted on Cloudflare (Workers). As with any host, Cloudflare processes standard request logs, including IP address, user agent and timestamps, for security and delivery. Those logs are handled by Cloudflare under its own privacy policy.
• Analytics. We use Cloudflare Web Analytics, which is cookieless and counts visits in aggregate, and Google Analytics 4, which measures how visitors use the site — pages viewed, approximate location, device and browser, and how they arrived — so we can improve it. Google Analytics sets its own cookies (such as _ga) and the data is handled by Google under Google’s privacy policy. You can opt out with the Google Analytics opt-out add-on, or by blocking cookies in your browser.
• Cookies. We set no advertising or marketing cookies of our own. Google Analytics sets analytics cookies (see above), and Cloudflare may set strictly necessary security cookies, for example for bot management.
• What is not here. Fonts are self-hosted. The site loads no Google Fonts and no advertising trackers.
• No accounts. There is no sign-up, no account and no newsletter, so there is nothing to log into.
• Email addresses on the site. Contact addresses are shown obfuscated and assembled in your browser. Writing to one is ordinary email (see section 7).

6. Purchases

RahaKit never sees or stores your payment card details.

• Extension licences are sold by Lemon Squeezy as merchant of record. Lemon Squeezy processes the payment, your email and your billing data under its own privacy policy, and passes to us the order and licence information needed to deliver and support your licence.
• Workbooks are sold through Etsy. Etsy processes the purchase under Etsy's privacy policy, and we receive the order information Etsy provides to sellers.

Lemon Squeezy and Etsy are responsible for the data they collect at checkout. Their own pages and cookies are covered by their policies, not this one.

What this means in practice. If your question is about a payment, an invoice, a refund or a chargeback, the merchant of record or the marketplace handles it under its own policy. If your question is about the licence or the file itself, we handle it — write to .

7. Support email

If you write to , or to a product address, we receive your email address and your message. We use them only to answer you and to keep the history of the conversation, and we keep the correspondence while it is needed for support and record-keeping. We do not add you to a mailing list and we do not use your address for marketing. Support email is handled through Google (Gmail) infrastructure, which is subject to Google's own privacy terms.

Please do not send passwords, including Vault passwords. Anything you choose to include in a message — for example, product content pasted into an email — becomes part of that email; it is not data collected by the product.

8. What we never do

• We do not sell, rent or share personal data for marketing.
• We do not sell or share personal information, as those terms are used in California law.
• We do not use data for advertising profiles.
• We do not track you through our products. (The usage statistics TypeCrux keeps stay on your own device; they are never sent to us.)
• We do not collect page content or keystrokes.
• We do not use licence, order or support information for anything other than delivering and supporting what you bought, answering you and keeping records.

9. Purposes and legal bases

Where the GDPR or UK GDPR applies, the limited processing in this policy rests on:

• Contract (Article 6(1)(b)): delivering and supporting purchases, and validating licences where that is necessary to provide the licensed product.
• Legitimate interests (Article 6(1)(f)): delivering and securing the website, understanding aggregate website use, answering enquiries and keeping the support history those answers depend on. These interests never include advertising profiles or product tracking.
• Legal obligations (Article 6(1)(c)): keeping or providing records where the law requires it.

Not every activity relies on every basis; the basis follows the purpose. You do not need an account to use this website or the free tools. Without the licence identifiers, a licence cannot be validated; without your email address and message, we cannot reply.

10. How long data is kept

• On your device: until you remove it. We cannot access or delete it.
• Licence and order information we receive: while it is needed to deliver and support what you bought, and for record-keeping.
• Support emails: while needed for support and record-keeping.
• Server logs and analytics: held by Cloudflare under its own policies.
• Checkout and payment data: held by Lemon Squeezy and Etsy under theirs.

11. Security

Our main protection is data minimisation: most of what you create never reaches us. TypeCrux's optional Vault encrypts your snippets on your device, and its key is never sent anywhere. That also means we cannot restore Vault contents if you lose your password. Local storage is not a guarantee against someone who controls your device or browser — protect your device, files and passwords accordingly. No system can promise absolute security, and we do not claim that.

12. Your rights

Under data protection law, including the GDPR and UK GDPR, you can ask us to give you access to personal data we hold about you, correct it, delete it, restrict its use, or object to processing that relies on legitimate interests. You can also ask for a portable copy of data you gave us, and withdraw consent where processing is based on consent.

If you are in California, you can ask to know, delete or correct personal information we hold — the categories are the ones described in this policy: support correspondence, and order and licence information received from Lemon Squeezy or Etsy — and we will not treat you differently for asking.

To use any of these rights, email . We may need to confirm that you control the email address you write from. We aim to reply within one month, and if we cannot act on a request we will explain why.

We hold very little: mainly support emails and the order and licence information passed on to us. For data held by Lemon Squeezy, Etsy, Cloudflare or Google, please contact them directly. For data stored only on your device, you can remove it yourself at any time through the product, or by removing the extension and its browser storage.

You also have the right to complain to the data protection authority in the country where you live or work. You do not have to contact us first.

13. Children

Our products and website are not directed at children, and we do not knowingly collect personal data from children. If you believe a child has written to us, please tell us at and we will delete the message.

14. International transfers

Our service providers, including Cloudflare, Lemon Squeezy, Etsy and Google, operate internationally and may process data in countries other than yours, including the United States. Each of them describes the safeguards that apply to the data it handles in its own privacy policy. The information we receive ourselves is limited to what is described in this policy, and this policy does not claim any particular certification or contractual mechanism for it.

15. Changes to this policy

If we change this policy, we will post the new version on this page and update the effective date at the top. If our practices change in a way that affects what leaves your device, we will update this page before the change takes effect. Where the law requires notice or consent for a change, that requirement will be met — continued use is not treated as a substitute for consent where consent is required.

16. Contact

RahaKit (rahakit.com)