Privacy Policy

Information processed by the basic calculator

• Tap timestamps: while a measurement is active, the page uses browser timing values to calculate the intervals between your taps.
• Recent readings: locked BPM values, timestamps and the selected rest/active context are stored in your browser's local storage by default. They are not sent to our server by the basic calculator.
• Preferences: language, tutorial state and consent choices are stored locally so the site can remember them.

You can remove local data through the history controls where available or by clearing site data in your browser. Private browsing and switching browsers or devices create separate storage.

Accounts, authentication and payments

If you create an account, we process the email address and profile information you provide, authentication records, account tier and security/session data. Passwords are stored as one-way hashes rather than plain text. If you use Google sign-in, Google provides the identity data necessary to create or locate your account under the permissions shown during sign-in.

Stripe processes paid checkout. We keep the order, plan, amount, currency, payment status and transaction identifiers needed to provide the purchase and reconcile it. Card or wallet credentials are entered with the payment provider and are not stored in this application's database.

Feedback and public roadmap

A feedback submission can include a title, description and optional email. We also use a random browser ID to reduce duplicate votes. Approved feedback may appear on the public roadmap, so do not submit medical, confidential or identifying details that you do not want displayed. Contact us to request removal and include enough information to locate the entry.

Analytics, reliability and consent

Google Analytics, Ahrefs Analytics and Vercel Speed Insights are optional. Their browser scripts load only after you choose “Accept all” in the consent notice. They can process device/browser information, approximate location derived from an IP address, page visits, referrers and interaction or performance events according to their own policies. Rejecting non-essential cookies prevents these optional scripts from loading through our application.

Hosting, security and error-monitoring providers may process request data, IP addresses, device details, URLs, timestamps and diagnostic information when necessary to deliver the service, prevent abuse and fix failures. Do not place sensitive personal information in URLs or feedback fields.

Google AdSense and advertising cookies

HeartRateTap has applied to Google AdSense. When Google advertising is enabled on an eligible content page, Google and its partners may use cookies, web beacons, IP addresses or other identifiers to deliver ads, limit repetition, measure performance, prevent fraud and—where permitted by your choices—personalize ads. AdSense advertising cookies may be associated with domains such as doubleclick.net or google.com.

Google explains how AdSense uses cookies in its AdSense cookie documentation. You can control personalized Google advertising through Google Ads Settings. Where required, Google's certified consent controls will be used before advertising is activated.

Google-served ads are not placed on sign-in, registration, password reset, profile, checkout-success, error, alert or other non-content screens. Advertising should remain visibly separate from navigation and the calculator controls.

Service providers and disclosure

We use providers for hosting, databases, authentication, email, payments, security, analytics and—after approval—advertising. They process data for the service they provide under their own terms and our configuration. We may also disclose information when required by law, to protect users and the service, or in connection with a business transfer subject to appropriate safeguards. We do not sell your heart-rate measurement history.

Retention and your choices

• Local history remains until you delete it or browser storage is cleared.
• Account, payment and security records are kept as needed to provide the service, meet legal duties and prevent fraud.
• Feedback is kept while it remains useful to the roadmap or until an appropriate deletion request is completed.
• You can reject optional analytics, clear local consent, use browser cookie controls and manage Google ad personalization.
• You may ask to access, correct or delete applicable account or feedback data, subject to legal and security requirements.

Children and international use

HeartRateTap is a general-audience service and is not directed to children under 13. Do not create an account or submit personal information if you cannot legally consent in your location. The service and its providers may process data in countries different from the one where you live.

Contact and policy changes

For a privacy request or question, email cloudhu2000@gmail.com. We may revise this policy as features, providers or legal requirements change; the date at the top identifies the current version. Our About page explains the editorial and correction process.