Privacy

What runs where

Every calculation runs in your browser, in WebAssembly built from the same Rust code the local MCP server runs. The site is a set of static files. There is no calculation on a server, so there is nothing for a server to see: the numbers you type, the coordinates you paste, and the links you make stay on your device.

What we do not collect

• No accounts, and no way to make one.
• No advertising, and no advertising identifiers.
• No analytics: no page-view counting, no session recording, no fingerprinting.
• No cookies. The site sets none, and nothing on it reads any.
• No third-party requests. Fonts, scripts, styles, and map data are served from this site's own origin.

The one exception is the bot check inside the problem-report dialog, described below. It loads only after you click "Report a problem", and only in that dialog.

What your browser keeps

Settings you choose are stored in your browser's local storage under keys beginning gp-: your display mode, unit profile, and your recent and pinned tools. They never leave your device, and clearing this site's data in your browser erases all of them. If you install the site or visit it again, a service worker keeps a copy of the pages, modules, and data files so the tools work offline. That cache holds the site's own files, not your inputs.

Problem reports, the one thing that is sent

If a result looks wrong, "Report a problem" opens a dialog that shows you the exact payload before anything is sent. You can turn off "Include my inputs and results" to send the report without them. Nothing is sent until you press Send.

A report carries only:

• the tool's id and version, the core version, and the build hash, so we can reproduce the answer;
• the inputs and results shown in the preview, unless you exclude them;
• the warning codes the result carried, and the page path with its permalink;
• your note, if you write one, up to 280 characters;
• the display mode, unit profile, and whether the window is phone-, tablet-, or desktop-sized.

Inputs a tool marks private are never included, and when any are present the results read "(withheld)", because a result can reveal the input it came from. There is no name, no email address, and no account, because there is nothing to attach one to.

Addresses and the bot check

The report endpoint does not store your IP address. To keep the form from being flooded it derives a daily, salted hash to count attempts, which cannot be turned back into an address and is deleted with the counters. Request logging is switched off on that endpoint.

Cloudflare Turnstile runs the bot check. Its script loads only while the report dialog is open, and it is the only third-party code this site ever loads. See Cloudflare's privacy policy.

Retention

Reports are kept while an issue is open and are deleted after it is resolved. Abuse counters are deleted daily. Confirmed issues are summarized, without report contents, on the known issues page.

Changes

This page describes what the code does, and it changes when the code does. See the changelog, or read the source.