Privacy Policy
Last updated: July 24, 2026
Who We Are
BallisticEngine is a physics-based ballistic penetration calculator operated at ballisticengine.com. This policy explains what data we collect (almost nothing), how we use it, and your rights under applicable privacy laws.
Data We Collect
We do not collect personal data. Specifically:
| Category | Collected? | Details |
|---|---|---|
| Name, email, phone | No | We do not ask for or store personal identifiers |
| IP address | Yes, in server logs * | Requests to our calculation API are logged by Cloudflare, including IP, coarse location and connection metadata. Used for debugging and abuse prevention; never linked to an identity or used for profiling |
| Cookies / trackers | No | No advertising, analytics, or tracking cookies. See our Cookie Policy |
| Calculator inputs | Yes, transiently | Penetration physics runs on our Cloudflare Worker, so shot parameters (velocity, mass, calibre, target material) are sent to it and appear in request logs. They are not stored in any database and are not tied to you |
| Browsing history | No | We run no analytics, no profiling and no cross-site tracking. Server logs record individual API requests, not a profile of your visit |
| Device fingerprint | Not by us | We neither generate nor read any fingerprint. Cloudflare's edge logs contain standard TLS handshake characteristics, which we do not process or query |
* Cloudflare hosts the site and runs our calculation API. It processes IP addresses for DDoS protection and may set a __cf_bm cookie. Request logs are retained for a limited period on our Cloudflare account and are used only to diagnose faults and abuse. If the calculator hits an error in your browser, a short technical description of that error (message, which component failed) is sent to the same API so we can find the fault — it contains no inputs and no identifiers.
Local Browser Storage
We store three preferences in your browser's localStorage. These never leave your device and are never transmitted to any server:
| Key | Purpose |
|---|---|
theme | Your light/dark mode preference |
tips | Whether result tooltips are enabled |
units | Metric or Imperial unit preference |
You can clear these anytime: Browser Settings → Clear browsing data → Cookies and site data.
Third-Party Services
We use a minimal set of third-party services, none of which collect personal data on our behalf:
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Cloudflare Pages | Hosting and CDN | cloudflare.com/privacypolicy |
| Supabase | Ammunition and weapons database (read-only API) | supabase.com/privacy |
| jsDelivr | Serves the Supabase client library | jsdelivr.com/privacy |
We do not use Google Analytics, Facebook Pixel, advertising networks, or any user tracking service.
Children's Privacy
BallisticEngine is an educational physics tool. We do not knowingly collect data from anyone, including children under 13 (COPPA) or under 16 (GDPR). We ask for no personal details, so no age verification is required.
Your Rights Under GDPR (EU/EEA)
If you are located in the European Union or European Economic Area, under the General Data Protection Regulation (GDPR) you have the right to:
Access — Request what personal data we hold about you. We hold no accounts and no profiles; the only personal data that exists is the IP address in short-lived server request logs. Erasure — Request deletion of your data. Request logs expire automatically; we can delete an entry sooner if you identify it. Portability — Request your data in a portable format. Not applicable, as we hold no structured personal records. Object — Object to processing of your data. Logging is limited to what is needed to keep the service working and secure. Complaint — File a complaint with your local Data Protection Authority.
Our legal basis for any minimal processing (serving web pages) is legitimate interest — providing the service you requested by visiting our site.
Your Rights Under CCPA (California)
If you are a California resident, under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) you have the right to:
Know — what personal information is collected. Only the IP address recorded in short-lived server request logs. Delete — request deletion. Those logs expire automatically; we can remove an entry sooner if you identify it. Opt-out of sale — we do not sell, share, or disclose personal information to third parties for monetary or other valuable consideration. Non-discrimination — we do not discriminate against users who exercise their privacy rights.
Under CCPA, we qualify as a business that does not collect personal information and therefore are exempt from most CCPA obligations. We include this section for transparency.
Your Rights Under Other Laws
Brazil (LGPD) — We hold no accounts or profiles; processing is limited to short-lived server request logs. Canada (PIPEDA) — No personal information is disclosed to anyone. Australia (Privacy Act) — No Australian personal information is collected. UK (UK GDPR) — Same protections as EU GDPR apply.
Data Security
Our site is served over HTTPS (TLS 1.3) via Cloudflare. All API calls to our database use encrypted connections. We hold no accounts, passwords or payment data; the only personal data present is the IP address in short-lived request logs.
Changes to This Policy
If we make material changes to this policy, we will update the "Last updated" date at the top. Changes are infrequent. If we ever introduce user accounts or analytics, this policy will be updated before those features launch.
Contact
Questions or concerns about this Privacy Policy?
Email: [email protected]