Updated 9 Nov · updated in the last 30 hours

Privacy

This page explains what personal data Measured Lab handles and why. The short version: the site has no cookies of its own, no ads, no accounts and no tracking across sites. We count visits with Cloudflare Web Analytics and a small counter of our own; neither uses cookies or identifies you. The calculators work on your device. We handle technical delivery and security data, emails you send us, and descriptions you explicitly choose to submit as explained below.

Effective 23 October 2026.

Who is responsible

InbiTech OÜ, a company registered in Estonia, publishes Measured Lab and is the data controller for this site. For anything about your data, write to corrections@measuredlab.com.

When you read the site

The site is hosted on Cloudflare Pages, so every request passes through the network of Cloudflare, Inc. To deliver the page and protect the site from attacks, Cloudflare receives your IP address, the address of the page you asked for and the usual information your browser sends, such as browser type and language. Cloudflare acts as our processor and handles this data under its privacy policy.

We do not keep server logs of visits and we do not try to identify readers. In our Cloudflare account we can see traffic totals, such as the number of requests and the countries they come from, and the records of our own counter described below, but not who you are.

Reading pages and using manual comparisons loads resources from measuredlab.com and the Cloudflare Web Analytics beacon described above. The optional description window also loads Cloudflare Turnstile for abuse prevention. We do not use advertising scripts.

We also run a small counter of our own, loaded from measuredlab.com (/_m/s.js), to see how pages are read. For each page view it records the page, how long it was visible, how far it was scrolled, the number of clicks and the links followed, together with the country, network, browser, operating system and device type that Cloudflare derives from the request. To count visitors per day it turns your IP address and browser into a one-way code that changes every day; the IP address itself is not stored. It sets no cookies and keeps nothing in your browser. The records stay in our Cloudflare account, with Cloudflare as our processor.

Cookies and local storage

Measured Lab sets no cookies. When Cloudflare suspects automated traffic it may set a short-lived security cookie (__cf_bm) to tell people from bots. It is strictly necessary for security, is not used for tracking and expires within 30 minutes.

Some calculators remember your last calculation in your browser's local storage, so that next time they can show how the result changed with newer prices. It stays on your device and is never sent to us. Clearing this site's data in your browser removes it.

Calculators and auditors

The calculators download our price files and do the arithmetic in your browser. Manual calculator entries, text in the token counter and files in the invoice and prompt cache auditors stay on your device. The separate description option sends text only after your consent and explicit action, as described below.

When you copy or share a link to a calculation, its settings, such as the model and the token counts, are part of the web address. Whoever opens that link sends those settings with the request, like any other web address.

When you email us

If you write to corrections@measuredlab.com, we receive your address, your name if you include it and whatever you write. Mail to that address is forwarded by Cloudflare Email Routing to our mailbox at Google (Gmail), so both companies process it as our providers.

We use your message only to reply, to check and fix what you reported, and to keep a record of corrections. The corrections log says that a reader found an error; it never shows your name or email address. We keep correspondence for up to three years after the last message, unless the law requires us to keep it longer.

We process this data on the basis of our legitimate interests (Article 6(1)(f) of the GDPR): delivering and securing the site, counting how pages are read, answering your messages and keeping the data accurate. You can object to this at any time, as described below.

International transfers

Cloudflare and Google are based in the United States and may process data outside the European Economic Area. Both take part in the EU–U.S. Data Privacy Framework and its UK extension, and use the European Commission's standard contractual clauses where those apply.

Your rights

Under the GDPR and the UK GDPR you can ask us for a copy of your personal data, ask us to correct or delete it, ask us to restrict how we use it, object to how we use it, and receive it in a portable format. Email corrections@measuredlab.com; we answer within one month. For data that only Cloudflare holds, such as the technical records of your visits, we will pass your request on or tell you how to reach Cloudflare directly.

You can also complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee). You can go to the authority in the country where you live or work instead; in the UK, that is the Information Commissioner's Office.

Readers in the United States

We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act, and we do not use it for targeted advertising. There is nothing to opt out of, and a Global Privacy Control signal from your browser changes nothing because nothing is shared.

Children

The site is written for adults working with AI services. We do not knowingly collect personal data from children.

Changes to this page

If what the site does with data changes, for example if we add a newsletter, we will update this page before the change takes effect and change the date at the top.

Contact

InbiTech OÜ, a company registered in Estonia. Email: corrections@measuredlab.com. The terms of use cover everything else about using the site.

Describe your task

When you choose Read my description, your text is sent through Cloudflare to Google's paid Gemini API to suggest editable task parameters. You must confirm them before comparing models.

This optional feature does not call any model selected by the comparison. Cloudflare Turnstile checks abuse only in the description window. Do not submit secrets, personal data or confidential material. Task text and suggested parameters are not stored in our database or application logs. Technical request records, daily budget counters and daily keyed IP identifiers limit abuse. Request records and IP counters expire logically after 48 hours. Daily budget totals expire 30 days after the end of their UTC day. Physical deletion happens in bounded passes when requests arrive. Expired records may remain during inactivity and in Cloudflare recovery copies. Google and Cloudflare process requests under their applicable service terms. Manual comparison works without sending a description.

Connected comparison tools

Connected clients send confirmed task parameters to compare models. Do not include task descriptions, personal data or API keys. These parameters are used for the comparison and are not stored in our database or application logs. Daily keyed IP identifiers and per-minute request counters limit abuse. Counters expire after two days; deletion happens in bounded passes as requests arrive. Expired counters may remain during inactivity and in Cloudflare recovery copies. This comparison does not send requests to model providers.