Privacy policy

Commission rate check (cmsratecheck.vercel.app) · Last updated 22 October 2026

This site is a free tool for artists and creators. It is not run for commercial purposes or for profit, and no data is ever sold.

1. No account needed: If you don’t sign in, everything stays in your own browser (localStorage and IndexedDB) and never reaches us. The only exception is when you create a share link: the rate page you chose to share is stored on our server so other people can open it.
2. If you sign in, we store the following on our server:
   • The sign-in provider you used (Google) and the account ID Google sends us
   • Your display name and a link to your profile picture (you can turn the picture off)
   • Your studio, price sets and share links
   • Draft quotes, invoices and receipts, including details you type in yourself, such as names, addresses, emails and tax IDs for you and your clients
   • Your commission queue and notes, such as job titles, client contact handles, amounts paid and due dates
   • Sample images you upload (see section 6)
   • Up to 5 automatic backups per data type, so you can recover if a merge goes wrong
   • A necessary sign-in cookie, which expires on its own if unused
3. What we don’t store: your account email, password, phone number, IP address, browser details, card details, posts, friends list or followers. We don’t keep Google access tokens after sign-in finishes, we don’t ask for permission to post, and we will never post anything on your behalf.
4. Your clients’ details: Quote and queue data is encrypted at rest by our database provider (Neon), and we add a second layer of encryption before saving it. It can only be opened when you’re signed in to your account, it never appears in share links, and we don’t look at it unless you ask us to help with a problem. PDFs you create are never uploaded; they stay on your device.
5. How we use your data: only to sign you in, sync and back up your data, let you use it across devices, and keep your share links working. We never sell it, share it or use it for advertising.
6. Sample images (signed-in accounts only):
   • Images are resized to at most 1200px on your device before upload, and all hidden file data (EXIF), such as GPS location and camera model, is removed. Your original file is never sent to our server.
   • They are stored on Cloudflare R2 (images uploaded earlier are on Vercel Blob), tied to your account, at public links that can’t be guessed. Anyone who has your share link can see them.
   • Images are deleted when you remove the image, the item or your account. Images not used on any board for 24 hours are deleted automatically. Cached copies may linger for a short time.
   • Upload only your own work: no one else’s art, no photos of real people without their permission, and no personal information. We never use your images to train AI and never pass them on to anyone. To report an inappropriate image, contact X: @cruel_illicit · Facebook: Anserem Flos
   • You can mark sample images as NSFW so viewers must tap to opt in before seeing them.
   • Nudity, partial nudity, or clearly sexual content must be marked NSFW.
   • Do not upload: sexual content involving minors (any depiction), extreme gore or violence, others’ work or copyright infringement, or images meant to harass or scam.
7. Services we use: Vercel (website hosting, storage for earlier sample images with Vercel Blob, and anonymous, aggregated visitor statistics with Vercel Analytics), Cloudflare (sample-image storage with Cloudflare R2), Neon (database), and Google, only to confirm your identity when you sign in.
8. How long we keep data: until you choose “Delete account and all data” in the account menu. When you do, your account, studio, quotes, queue, sample images and all backups on our server are deleted immediately. Database system backups expire on their own within 7 days. You can choose whether to delete your share links too or keep them.
9. Signing out: your data stays on this device so you can keep using it. On a shared device, choose “Also delete data from this device”, and you can use “Sign out everywhere” from the account menu.
10. Your rights under Thailand’s Personal Data Protection Act (PDPA): you can view, correct, export or delete your data. You can do this yourself from the account menu (Export my data / Delete account and all data) or by contacting the site admin at X: @cruel_illicit · Facebook: Anserem Flos. You are responsible for the client details you enter, and you can edit or delete them at any time.
11. How to delete your data (Google sign-in accounts):
    1. Sign in at cmsratecheck.vercel.app with the account you want to delete.
    2. Open the account menu (your profile picture, top right) and choose “Delete account and all data”.
    3. Confirm. Your account and all synced data on our server are deleted immediately. Data on your device stays unless you choose “Also delete data from this device”.
    4. If you can’t get into your account, or you’ve already disconnected the app in your Google account settings, contact the site admin at X: @cruel_illicit · Facebook: Anserem Flos with the display name on your account. We’ll delete it and reply when it’s done.
12. Contact: X: @cruel_illicit · Facebook: Anserem Flos (we don’t offer email contact)
13. If this policy changes, we’ll announce it on the site and update the date at the top of this page.