Privacy Policy | ContentPaycheck

1. Introduction

ContentPaycheck ("we," "us," or "the site") operates the website located at contentpaycheck.com. We provide free educational calculators and guides to help content creators plan income across YouTube, TikTok, Instagram, Facebook, Twitch, sponsorships, affiliates, and digital products.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you may have regarding your data.

2. Information We Collect

2.1 Information You Provide Directly

Our calculators run entirely in your browser. The numbers you enter (views, RPM, conversion rates, etc.) are processed on your device to produce estimates and are never transmitted to our servers.

If you contact us by email, we receive whatever information you choose to include in your message (for example, your name, email address, and the content of your email). We use that information solely to respond to your inquiry and improve the site, unless you agree otherwise.

2.2 Information Collected Automatically

Hosting and delivery. Our hosting provider processes standard technical data when you request pages and assets (for example, IP address, TLS metadata, request path, coarse location labels the host may attach, browser type, timestamps, and referrer where your browser sends it). That processing supports delivering the site, security, and abuse mitigation, and is described in the host's privacy policy.

Optional first-party page metrics (not calculator inputs). When analytics ingest is turned on in our admin settings, the public site uses a small browser flow on ordinary pages (excluding the admin area):

A GET request to our own endpoint (/api/public/analytics-ingest) returns a simple on/off flag read from the same site settings we use for operations. That response does not include calculator inputs.
If the flag allows recording, the browser may send one POST per navigation to /api/admin/collect with the page path and referring URL when available. Our server adds technical fields from the request (for example, User-Agent, client IP as seen by the server, and coarse geo headers when the platform supplies them) for limited operational metrics and abuse rate limiting. This is not cross-site behavioral marketing analytics.
Those page-view events are stored in a capped rolling list: when Redis credentials are configured, we persist them there (bounded list; older entries drop as new ones arrive). If Redis is not configured, we keep a similar bounded buffer in server memory on the running instance, which is cleared on redeploy or restart.

If the ingest check fails (network error or non-success response), no /api/admin/collect call is made for that attempt. The browser may send a separate, rate-limited POST to the ingest route with a minimal diagnostic payload so we can log the failure server-side for debugging and operations. That diagnostic request does not turn on page metrics collection.

A legacy URL GET /api/admin/track may still exist for compatibility; it is not used by our pages, returns an empty response, and does not write page-view records. We do not link to it from the public site.

3. Cookies, browser storage, and similar technologies

First-party page metrics are not cookie-based analytics. When enabled, traffic counting relies on ordinary HTTP requests from your browser to our own endpoints (see Section 2.2), not on a separate “analytics cookie” product from us.

Consent preference. Where we show a cookie or consent banner, your choice may be stored in browser storage such as local storage so we do not keep re-prompting you on every visit. That is first-party to this site.

Third-party advertising. When Google AdSense is enabled for this deployment, Google and its partners may use cookies and similar technologies to serve and measure ads, including across sites, according to Google's policies. When AdSense is not enabled, we do not load that script from this application.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies; blocking all cookies may affect your experience here and on other sites.

4. Advertising

AdSense loading is fail-closed. We only inject Google's AdSense loader script when the deployment is explicitly configured with both a valid publisher identifier and an enable flag in the server environment, as described in our site configuration. If those settings are not present, no AdSense script is loaded from this application.

When AdSense is enabled, we use Google AdSense to display advertisements on this site. Google AdSense is an advertising service provided by Google LLC.

This site does not render manual Google ad unit snippets in page markup; which formats or placements appear (for example, Auto ads or other options you enable) is controlled in your Google AdSense account, so visitors may see no ads even when the script loads if inventory is turned off there.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting:

For more information about how Google collects and processes data in connection with advertising, please see How Google uses data when you use our partners' sites or apps.

5. Third-Party Services

We use the following third-party services that may collect or process data under their own privacy policies:

Google AdSense (Google LLC) — serves advertisements and may collect browsing data for ad personalization. See the Google Privacy Policy.
Vercel Inc. — hosts the site and processes standard server logs including IP address, browser type, and timestamps. See the Vercel Privacy Policy.
Upstash — optional hosted storage (Redis-compatible) used for bounded first-party page-view lists and editable site settings when you configure the integration. Records may include technical identifiers (such as IP or User-Agent) as described in Section 2.2. See the Upstash Privacy Policy.

If we add additional third-party services in the future, this section will be updated accordingly.

6. How We Use Your Information

We use the information described above for the following purposes:

To operate, maintain, and improve the site and its content
To respond to your inquiries and communications
To serve relevant advertisements through Google AdSense
To understand aggregate traffic using the first-party metrics described in Section 2.2 (when enabled)
To detect, prevent, and address technical issues and abuse
To comply with legal obligations

We do not sell your personal information.

7. Legal Basis for Processing (EEA/UK/Switzerland)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

Consent: Where required for non-essential advertising technologies (for example, when you interact with our consent banner or controls). You may withdraw or change that choice using those controls or by clearing stored preferences in your browser.
Legitimate interest: For operating and securing the website, limited first-party traffic metrics described in Section 2.2, subject to applicable law, and preventing abuse.
Legal obligation: Where we are required by law to retain or process data.

For users in the EEA, UK, and Switzerland, we intend to present a consent management dialog before non-essential advertising technologies are used, subject to the configuration and delivery of our consent tools and any regional rules that apply to your visit.

Operators may also use Google's Privacy & messaging tools in the Google AdSense account (for example, regional consent messages). What visitors see can depend on those account settings as well as this site's consent banner and script behavior.

8. Your Privacy Rights

8.1 Rights Under GDPR (EEA, UK, Switzerland)

If you are in the EEA, UK, or Switzerland, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your personal data ("right to be forgotten")
Restrict the processing of your data
Object to processing based on legitimate interest
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time where processing is based on consent

You also have the right to lodge a complaint with your local data protection supervisory authority.

8.2 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with the following rights:

Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You can request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell personal information as defined under CCPA/CPRA.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

8.3 Other U.S. State Privacy Laws

Residents of other U.S. states with applicable privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights regarding access, deletion, and opting out of certain data practices. Please contact us to exercise any applicable rights.

To exercise any of the above rights, please contact us using the details on the Contact page. We will respond within the timeframe required by applicable law (generally 30 days for GDPR, 45 days for CCPA/CPRA).

9. Data Retention

First-party page-view metrics are kept in a capped rolling buffer (see Section 2.2): older entries are removed as new ones arrive, and in-memory data is lost when the server process restarts. For data held in Upstash, retention and subprocessing also follow Upstash and your project settings.

If you contact us by email, we retain your correspondence for as long as reasonably necessary to address your inquiry and for our legitimate business records, typically no longer than 2 years.

Cookies set by third-party advertising partners have their own retention periods as specified in their respective privacy policies.

10. Data Security

We implement reasonable technical and organizational measures to protect the information we process, including encrypted connections (HTTPS/TLS), secure hosting infrastructure, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our hosting provider and third-party services operate. These countries may have different data protection laws than your own. Where such transfers occur, we rely on appropriate safeguards, including the service providers' compliance with applicable data protection frameworks.

12. Do Not Track

Some web browsers transmit a "Do Not Track" (DNT) signal. Because there is no universally accepted standard for how DNT should be interpreted, our site does not currently respond to browser DNT signals. You can control tracking through the opt-out links provided in the Advertising section above.

13. Children's Privacy

This site is not directed at individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us through the Contact page on this site, or by email at info@contentpaycheck.com.