CostLatch privacy

Last updated September 29, 2026.

Your files

Price lists you add (Excel, OpenDocument, CSV or text files, or pasted tables), SKUs, prices, column choices and reports are processed in your browser tab. CostLatch does not upload them or save them to our servers. Reloading or clearing the page removes this working data. Reports you download remain on your device.

Analytics

When product analytics are allowed, we also use Google Analytics, based in the United States, to measure visits and named product actions. It uses first-party browser and session cookies, processes connection information such as IP addresses to provide the service, and receives fixed page routes, approved campaign labels and the referring site hostname. We do not send form contents, uploaded files, email addresses or private workspace addresses. Advertising signals and personalization are disabled. The same regional consent, browser privacy signals and turn-off control apply to both analytics services; turning analytics off stops Google collection and removes its cookies. Google analytics event data is retained for up to 14 months. Anonymous totals are not sent to Google.

Outside the European Economic Area, the United Kingdom and Switzerland, product analytics (PostHog, hosted in the United States) is on by default to help us improve CostLatch. You can turn it off using the control above at any time. If your browser sends Global Privacy Control or Do Not Track, analytics stays off automatically, with no prompt — even if you previously chose Allow.

In the EEA, UK and Switzerland — and whenever we cannot tell where you are — we ask first. Until you allow analytics, we keep only an anonymous daily count of page visits in Cloudflare D1 (stored in the EU). That count has no identifier, IP address, user agent or referrer attached, is kept for up to 90 days, and is never sent to PostHog. “Turn off analytics” above stops these anonymous totals too.

When analytics is on, PostHog receives a random browser identifier, event names, a coarse country (from the network edge, not GPS), a masked IP address, coarse browser, operating-system and device classes, approved campaign labels, a referring website hostname when available, action types, row counts and error codes. An unavailable referrer may be a direct visit or a browser withholding it; we do not infer which. If you answer the optional “would this be worth US$19 once to you?” question after a report, this includes a fixed reference price and your yes/no answer; an answer given with the fictional example is marked as sample data. We never send file names, file contents, SKUs, prices, raw URLs or reports.

There is no session recording (screen replay is not offered), no device fingerprinting, no advertising and we do not sell data. The only purpose is understanding and improving CostLatch. Cloudflare, our hosting provider, and PostHog, our analytics provider, each process ordinary connection logs (such as IP address and request metadata) to deliver and protect their services.

Your consent choice, and, once analytics is on, an anonymous identifier and your acquisition labels, are stored locally in your browser. Turning analytics off above removes that identifier and those labels from this browser immediately, stops PostHog in any other tab of this site you already have open, and stops the anonymous visit total from your next page load. Turning analytics back on starts with a new anonymous identifier. The RTG-internal-testing marker below is a separate, collapsed setting and is not changed by this choice.

Hosting and support

Cloudflare delivers the website and may process connection information such as IP address and standard request metadata to provide and protect its service. If you choose to email us, we process your message to respond. Please do not send confidential price files. There is no account or payment collection in this preview.

Contact

CostLatch is operated by Winter Watermelon. For privacy requests, email hello@wwatermelon.com. See also the company privacy information.