Effective date: October 20, 2026
This policy explains what personal data CaveTab (the “site”) processes, and why.
1. Who is responsible
The data controller is quaply, Türkiye. Contact: [email protected]
2. Short version
- All calculations run in your browser. We do not receive the amounts or dates you enter.
- We use no analytics and no ad network.
- We do not sell your data. We do not share it for advertising.
- If you buy Pro, Paddle handles the payment. We store only what we need to run your license.
3. Visiting the site
Hosting. Cloudflare hosts the site. When you open a page, Cloudflare’s servers receive your IP address, browser type, the requested page and the time. Cloudflare uses this data to deliver the site and to protect it from attacks. Legal basis: our legitimate interest in a working and secure site (GDPR Art. 6(1)(f)). See Cloudflare’s privacy policy.
Fonts. The site serves its fonts from its own server. Loading them does not send data to anyone else.
4. Data stored in your browser
The site saves some data in your browser’s local storage. This data stays on your device. It is not a cookie.
gnk.license: your Pro license key, if you have one.gnk.device: a random device id. It does not identify you.gnk.handle: the @handle you choose for share cards (optional).gnk.signin: a short note that a sign-in is in progress.- Display settings, for example your last choices in the calculator.
Share cards are drawn in your browser. Nothing is uploaded. To delete this data, clear the site data in your browser settings.
5. Buying Pro
Paddle. Paddle.com is the Merchant of Record for Pro. Paddle collects the data for the purchase, such as your name, email address, country and payment details. Paddle is responsible for this data under Paddle’s privacy policy. We do not receive your payment card details.
License server. After payment, our license server issues your license key. The license server runs on Cloudflare (Workers and KV). It stores:
- the Paddle transaction id;
- the Paddle customer id;
- your license key;
- up to 3 random device ids for each key.
The license server receives the device id and the license key when you turn Pro on in a browser. It uses them to limit one key to 3 devices.
Legal basis: performance of the contract (GDPR Art. 6(1)(b)). We keep this data for as long as the license exists, or until you ask us to delete it.
6. Optional account
An account is never required. If you sign in, Clerk (clerk.com) provides the sign-in, with email or with Google. We receive your email address and a Clerk user id. The license server stores the Clerk user id together with your license key. It uses your email address only to find your purchase at Paddle, and it does not store the email address. We use the account only to restore Pro on your other devices.
Clerk sets its own cookies that are needed for the sign-in. See Clerk’s privacy policy. Legal basis: performance of the contract (GDPR Art. 6(1)(b)). You can ask us to delete the account link at any time.
7. Ads
The site has no ads now. If we add ads, we will update this policy first. We will ask for your consent where the law requires it.
8. Transfers to other countries
Cloudflare, Google, Paddle and Clerk may process data outside your country, for example in the United States. These transfers use the safeguards the law requires, such as the EU Standard Contractual Clauses.
9. Your rights
Under the EU and UK GDPR and the Turkish Personal Data Protection Law No. 6698 (KVKK), you have these rights:
- to learn whether we process your data, and to get a copy of it (access);
- to have wrong data corrected (correction);
- to have your data deleted (deletion);
- to object to processing, and to restrict it;
- to receive your data in a portable format;
- to withdraw your consent at any time, where processing is based on consent;
- to complain to a supervisory authority, such as the data protection authority in your EU country or the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
To use these rights, write to [email protected]. We answer within 30 days. We may ask you to confirm your identity first. For data that Paddle or Clerk holds, you can also contact them directly.
10. Children
The site is not directed at children under 13. In the EU, it is not directed at children under 16. We do not knowingly collect data from children.
11. Security
We keep the data we store to a minimum. We protect it with access controls and encrypted connections (HTTPS).
12. Changes to this policy
We may update this policy. The effective date at the top shows the latest version.