Your data

What I read, what I keep, and how to delete it. I will never sell any of it.

What I keep

In your browser
The plan you build, the amounts you enter and what you've offset, so they're still there when you come back. Only what you've offset leaves your device, and only if you sign in.
On my server
When you pay: Stripe takes your card, and I never see its number. Stripe tells me your name, email and what you paid. I pass your name and email to Pledge, so each gift is made in your name and Pledge can email you a receipt. I keep each gift's charity, amount and date, and Pledge's record of it, which includes your name and email. Never how much you use anything: those counts and totals stay in your browser.
Nowhere
Any file you add: I turn it into amounts on the page and keep none of it. Your state starts as a guess from your connection's location, which my host reads on each visit; I don't save it, and picking a state replaces the guess.
Passes through, not kept
If you paste an API key, it goes through my server once, to ask OpenAI or Anthropic for your usage totals, which come straight back to this page. I don't save or log the key or the totals. If you join Who's offsetting, your browser sends the amounts on your plan with your birth year and state, so my server can work out the gifts and check that they were confirmed. It keeps only the name you pick, the items and dates, and those gifts, never the amounts you entered. It also gets the names of the items you use none of, which count as offset on the list, but no amounts or counts.

Delete it

Clear this browser

Removes your plan, your answers, any gift in progress and your link to change your name on Who's offsetting from this device. The page starts fresh. It also removes your record of what you've offset, since you're not signed in. Your gifts and their receipts aren't affected.

See my promises and where the money goes.