Privacy Policy

Who controls submitted information

For the limited information submitted through feedback and supporter features, the data controller is Ahmed Raza, trading as WithinBench. The address for privacy and legal correspondence is Plot #384/2, Azizabad, Karachi, Sindh, Pakistan, and the contact email is [email protected]. See the Legal Notice for the complete operator disclosure.

The core principle

WithinBench's benches and document makers run inside your web browser. The text and supported files you use in those benches, and the documents you create, are processed on your own device and are never uploaded to any server. Information you deliberately send through the feedback or public supporter-note forms is the limited exception described below.

Data we store

• On your device only. Documents, drafts and settings are saved in your browser's localStorage so your work is still there when you come back. This data stays on your device, is not transmitted to us, and you can clear it any time from the app or your browser settings.
• No accounts or document database. There is no sign-up, account profile or password collection. If you voluntarily include an email address with feedback, it is handled only as part of that feedback message.
• Optional supporter notes. If you generate a Binance payment note, we store your chosen public name or Anonymous label, optional country, message, amount-display preference, consent time and random payment-note code in Cloudflare D1. If you provide the optional email, it is normalized and converted into a protected one-way identifier so repeat support can be counted; the address itself is not stored or published. This is separate from every bench and never contains your documents or tool inputs.

Why submitted information is processed

• Feedback: to read and respond to a message, investigate a reported problem and improve the service. This is based on your request and our legitimate interest in maintaining WithinBench.
• Supporter notes: to generate and match a payment-note ID, manually verify a payment, publish only the details you selected and administer removal requests. Publication is based on your explicit choice; verification, security and record integrity support our legitimate interests.
• Security and availability: to detect spam, enforce rate limits, investigate errors and protect the service and its visitors. This is based on our legitimate interest in operating a safe, reliable service.
• Legal records: to keep information that applicable tax, accounting, fraud-prevention or legal obligations require.

Providing feedback, an email address, supporter details or a public note is optional. If information is needed to complete a requested feature and you do not provide it, that feature may not work, but the browser-based benches remain available without an account.

Analytics

When enabled, we use Cloudflare Web Analytics, a privacy-friendly, cookieless service, to understand aggregate traffic (for example, how many people visit and which tools are popular). It is configured without cross-site advertising identifiers or tracking cookies. Whether a notice or consent is legally required can depend on local law and the final production configuration. We do not sell personal information.

Feedback and abuse protection

When you submit the feedback form, we receive the message, its category, the relevant bench or page, and any reply email you choose to provide. Basic technical information, including your IP address and browser user agent, is processed to prevent abuse and troubleshoot reports. Feedback is delivered to our private email inbox; it is not added to an account or a public profile.

The feedback and supporter-note forms use Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. Cloudflare processes the technical information needed to provide that security check. Turnstile is loaded only where a protected form is shown and does not prevent anyone from reading the page.

To enforce feedback and supporter-note generation limits, Cloudflare keeps a temporary rate-limit bucket for an IP address or IPv6 network prefix. The bucket contains request types and timestamps, not the feedback message. Each entry stops being used after 24 hours, then its stored data is automatically deleted shortly after the retention window ends.

Feedback retention and deletion

Feedback emails are deleted within 12 months after the last action on the message unless they remain necessary for an active investigation, unresolved product task, security matter or legal obligation. If you included an email address and want a feedback message removed sooner, contact us from that address so we can locate and delete it.

Supporter-note publication and retention

Generating a note does not make it public. It remains pending while a Binance payment is manually verified. Pending notes expire after 30 days. Expired or rejected private records are deleted after approximately 30 days. A verified public entry may show the submitted name or Anonymous label, country, message, payment date, original amount and currency when permitted, and a maker-entered estimated USD value used for consistent display and sorting, plus an optional reply from WithinBench. Exact payment times, transaction identifiers and the private payment-note code are never published. When an optional email identifier links multiple verified payments, the public entry may also show how many times that supporter has contributed.

The USD value is an administrative estimate recorded when the payment is verified; it is not a live exchange rate, financial statement or promise of conversion value. The original paid quantity and currency remain the primary payment record when the supporter permits them to be shown.

Published supporter notes remain visible while the supporter wall operates, until you withdraw publication permission, or until the entry is no longer useful or appropriate. To request removal, contact us and include the private payment-note code so we can locate the entry. We may reject or remove abusive, misleading or inappropriate submissions.

After a note is generated, the operator receives a private operational email containing only the random payment-note code and a reminder to review it. The alert contains no submitted name, country, message, email address or amount, and is deleted from the operator's mailbox within 30 days.

Payment information

Binance Pay processes the payment under its own terms and privacy notice. WithinBench does not collect payment credentials. During manual verification, the operator may record the payment date, original asset and quantity, an administrative USD value, the payment-note ID and related accounting records. Financial and tax records may be retained for the period required by applicable law, even if a public supporter entry is later removed.

Cookies

WithinBench does not use tracking cookies. Should we introduce advertising or additional analytics in the future, this policy will be updated and, where required, you will be asked for consent.

Third-party services

Cloudflare provides site delivery, aggregate analytics, Turnstile abuse protection, the feedback and supporter Workers, D1 supporter-note storage, the private steward application and email routing. It may process normal connection data such as an IP address, request time, browser information and the page requested. Fonts and bench libraries are served with the site; your document and file contents are not sent to those services.

Feedback and the random code-only supporter alert are delivered to a private Google-hosted mailbox. Google therefore processes the feedback email, any reply address included in it, and the random alert code. Binance processes payment information independently when you use Binance Pay. These providers may process information in countries outside Pakistan or your own country under their contractual and legal safeguards.

Automated decisions and international visitors

WithinBench does not use submitted information for advertising profiles or decisions that produce legal or similarly significant effects. Automated security checks may temporarily reject a request; you can use the stated email route if that happens. WithinBench is operated from Pakistan and is generally accessible worldwide rather than established in or specifically directed to a particular foreign jurisdiction.

Children

WithinBench is a general-purpose utility and is not directed at children under 13. Voluntary Binance support and public supporter notes are available only to people aged 18 or older.

Your choices and requests

You can clear browser-local work through WithinBench or your browser's storage controls. For information deliberately submitted to the feedback or supporter systems, you may ask whether it is held, request access, correction, deletion, restriction or portability where applicable, object to certain processing, or withdraw publication permission by contacting us. Withdrawing permission does not invalidate processing that was lawful before withdrawal. We may need enough information to locate the record and confirm that the request comes from the person connected to it. Applicable privacy law may provide additional rights depending on where you live, including the right to complain to an applicable data-protection authority.

Changes

We may update this policy as the product evolves. Material changes will be reflected by the "last updated" date above.

Contact

Questions about privacy? Email [email protected] or use the contact page. Postal correspondence can be sent to the address in our Legal Notice.