Privacy Policy
Last updated: October 2026
What we collect
Email address: required to deliver your purchase, send your receipt, and provide secure sign-in links to My Books.
Order details: which price book you bought, the amount, the date, and the payment status.
Support messages: the name, email, and message you submit through the contact form.
Abuse-prevention data: a one-way hash of your IP address for rate limiting. We do not store raw IP addresses with your messages.
Calculator inputs: your hourly rate and markup settings stay in your own browser and are only sent to our server when needed to build your workbook. We do not use them for anything else.
Payments
Card payments are processed by Stripe. Card numbers are entered directly into Stripe's secure checkout. PlumbRate never sees or stores full card details. Stripe processes your payment information under its own privacy policy.
How we use it
To deliver and re-deliver your purchase, to answer support requests, to prevent fraud and abuse, and to meet tax and accounting obligations. We do not sell your data, and we do not send marketing email unless you separately ask for it.
Advertising and measurement (Meta Pixel & Conversions API)
We use the Meta (Facebook/Instagram) Pixel in your browser and the Meta Conversions API on our server to measure how well our ads work. The Pixel records page views and the Conversions API sends two purchase-funnel events from our server: when a checkout is started and when a payment is confirmed.
These events include the price book selected, the amount actually charged, the currency, the order reference, your browser user agent, IP address, and Meta's own advertising cookies (_fbp / _fbc) when present. Contact details such as your email address, name, and billing city, state, ZIP, and country are normalized and irreversibly hashed with SHA-256 before they are sent, so Meta only receives hashed values.
We never send Meta your card details, your hourly-rate or overhead calculator inputs, workbook contents, support message contents, or account credentials.
You can opt out by using your browser's tracking-protection or cookie controls, an ad blocker, or Meta's own ad preferences and off-Facebook activity settings in your Meta account. Blocking these tools does not affect your purchase or your ability to download your workbook.
Google Ads purchase measurement
We use the Google tag to measure purchases attributed to Google Ads. After Stripe confirms a real payment, Google receives the amount and currency actually charged and a unique Stripe checkout reference used to prevent duplicate conversion counts. We do not send Google your name, email, billing address, card details, calculator inputs, or workbook contents, and enhanced conversions are not enabled.
Google Ads measurement is blocked for visitors in regions where advertising consent is required, and when we cannot reliably determine the visitor's region. We also honor supported browser tracking opt-outs. Elsewhere, you can block this measurement with your browser's tracking protection, cookie controls, or an ad blocker. Blocking it does not affect your purchase or download.
Site analytics (Google Analytics 4)
We use Google Analytics 4 to understand how visitors find and use the site: pages viewed, the ad campaign or website that sent you, checkout starts, and confirmed purchases (price book, amount, currency and a Stripe checkout reference). Page addresses sent to Google keep only campaign labels and ad click IDs. We remove access links, order references in the address, and any other personal details first.
We do not send Google your name, email, billing address, card details, calculator inputs, or workbook contents. Google Analytics follows the same region and browser opt-out checks described above for Google Ads, and you can block it the same way. Blocking it does not affect your purchase or download.
We also keep a first-party record of which campaign or website first sent you and the most recent one, stored in your browser and attached to your order, so we can see which ads lead to sales.
Service providers
We use Stripe (payments), our hosting and database provider (order storage), and our email delivery provider (receipts and access links). The contact form is protected by automated abuse and rate-limiting checks.
Retention
Order and receipt records are kept as long as required for tax and accounting purposes. Sign-in links expire in 30 minutes; contact messages are kept while needed to resolve your request.
Your choices
Use our contact form to request a copy of your data or ask us to delete it. Deleting your order record also ends your ability to re-download that workbook.