Privacy

Last updated October 9, 2026. Shallsheet is run by [[ENTITY NEEDED]]. Questions about this page go to [[CONTACT EMAIL NEEDED]].

The quote

When you drop a PDF on the first page, this browser tab reads it, counts its pages, indexes its sentences, scans it for controlled markings and computes two SHA-256 fingerprints, one of the file and one of its text. All of that runs in the tab. The file and its text are not sent anywhere for the quote, and closing the tab discards them. You can check this in your browser's network panel: every request goes to this site, for its pages, scripts and fonts, plus one asking whether the till is open.

Checkout

When you choose to pay, the tab sends the scope receipt to our checkout function: the two fingerprints, the page count, the sentence count, the tier and the price. No word of the document is in it. The function opens a Stripe Checkout page and stores that receipt in the Stripe session's metadata, and that metadata is the whole record of your order. Stripe collects your card and email under its own privacy policy (stripe.com/privacy); we receive the payment status and the email Stripe shows on the session, and we do not see your card number.

The paid run

On the matrix page you drop the same PDF again. The tab checks its fingerprint against the one in Stripe, then posts the text of its pages to one function on Vercel. That function holds the text in memory for the length of the request, indexes it, and, unless the document carries a controlled marking or the model key is unset, sends the indexed sentences in 20-page windows to Anthropic's API for typing, under Anthropic's commercial terms (anthropic.com/legal/commercial-terms). The function writes nothing to disk, keeps no copy, and logs no document text; when the response ends, the text is gone from our side. The matrix and its receipt come back to your tab, and you keep them by downloading them. A run count is written to the Stripe payment's metadata so a purchase covers three runs.

What we do not do

No account, no cookie, no analytics, no advertising pixel, and no third-party script runs on any page. A service worker keeps a copy of the first page in this browser so the quote works offline; your browser's site settings remove it.

Hosting and logs

The site and its functions run on Vercel, which records standard request logs (time, path, IP address, user agent) under its own policy (vercel.com/legal/privacy-policy). Those logs never include the body of a request, so they never include your text.

Your choices

You can quote any number of documents without sending anything. To ask what Stripe holds for an order, or to have an order's metadata cleared after any refund window has passed, write to [[CONTACT EMAIL NEEDED]] with the session id from the matrix page's address.