Privacy Policy

Last updated: 13 May 2026 · Applies to tariffai.eu and all subpages

TariffAI.eu is a free trade intelligence tool. We do not sell your data, we do not run advertising, and we do not share personal data with third parties for marketing purposes.

1. Who we are

TariffAI.eu ("we", "us", "our") is operated as an independent trade intelligence platform. For privacy enquiries, contact us at info@tariffai.eu.

2. What data we collect

2.1 Data you provide directly

Email address — if you subscribe to tariff change alerts or the product waitlist. Used solely to send the alert or notification you requested. You can unsubscribe at any time via the link in any email we send.
Product descriptions — text you type into the calculator search field. This is sent to our Cloudflare Worker and to the Anthropic API to classify your product. It is not stored or linked to your identity.

2.2 Data collected automatically

Usage analytics — if you accept cookies, we collect anonymised page view data (pages visited, country, device type, browser). We do not collect IP addresses or fingerprinting data.
Cookie consent choice — stored locally in your browser (localStorage) to remember your preference. This data never leaves your device.
Server logs — our hosting provider (Cloudflare) records standard access logs (IP address, request path, timestamp). These are retained for a maximum of 30 days for security purposes. We do not process these logs for profiling.

3. Cookies and local storage

We use the minimum number of cookies necessary. We do not use advertising cookies, tracking pixels, or third-party marketing scripts.

Name	Type	Purpose	Duration
tariffai_cookie_consent	localStorage	Stores your cookie consent decision (accepted / declined). Never sent to any server.	Until you clear browser storage
Google Fonts	Third-party CDN	Loads the Libre Baskerville and Source Sans 3 typefaces. Google may log the request. No tracking cookies set.	Session
Cloudflare	Infrastructure	Cloudflare may set security cookies (_cfuid) for DDoS protection and bot mitigation. These are strictly necessary and not used for tracking.	Session / 1 year

4. Third-party services

Anthropic API

When you search for a product, the text you type is sent to the Anthropic API to classify it to a Harmonized System (HS) code. Anthropic processes this as a zero-retention API call — the text is not stored by Anthropic beyond what is necessary to return a response. Anthropic's privacy policy is available at anthropic.com/privacy.

Supabase

Tariff data (EU TARIC rates and iTA phase-down schedules) is stored in a Supabase database. Your product search queries are not stored in this database. Supabase processes data in the EU region. Supabase's privacy policy is at supabase.com/privacy.

Cloudflare Workers

Our backend logic runs on Cloudflare's edge network. Cloudflare may process your IP address to route requests. Cloudflare's privacy policy is at cloudflare.com/privacypolicy.

Google Fonts

We load fonts from Google Fonts CDN. This involves a request to Google's servers which may include your IP address. No cookies are set by Google for this request. Google's privacy policy is at policies.google.com/privacy.

5. How we use your data

To provide the tariff calculation service
To send tariff change alerts if you subscribed
To send product launch notifications if you joined a waitlist
To improve the service (anonymised usage analytics, if accepted)
To maintain security and prevent abuse

We do not use your data for advertising, profiling, or sale to third parties. We do not use automated decision-making that produces legal or similarly significant effects.

6. Legal basis for processing (GDPR)

Data	Legal basis
Email address (alerts / waitlist)	Consent (Article 6(1)(a) GDPR) — you explicitly opt in
Product search text (AI processing)	Legitimate interests (Article 6(1)(f) GDPR) — necessary to provide the service you requested
Analytics cookies	Consent (Article 6(1)(a) GDPR) — only if you click Accept
Server logs	Legitimate interests (Article 6(1)(f) GDPR) — security and abuse prevention

7. Your rights under GDPR

If you are located in the EU or EEA, you have the following rights:

Right of access — request a copy of any personal data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your personal data
Right to restriction — request we limit how we process your data
Right to data portability — request your data in a machine-readable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any right, email info@tariffai.eu. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

8. Data retention

Email addresses for alerts: retained until you unsubscribe
Server logs: maximum 30 days
Analytics data: anonymised, retained for 12 months
Cookie consent preference: stored in your browser until cleared

9. Data security

All data in transit is encrypted with TLS. API keys and database credentials are stored as encrypted environment variables in Cloudflare — they are never exposed in client-side code. We conduct periodic security reviews of our infrastructure.

10. Children

TariffAI.eu is a business trade tool not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data, please contact us at info@tariffai.eu.

11. Changes to this policy

We may update this policy to reflect changes in our practices or for legal reasons. We will post the updated version here with a revised date. For material changes, we will notify alert subscribers by email.

12. Contact

For privacy questions, data requests, or complaints:

Email: info@tariffai.eu
Website: tariffai.eu