Your postcodes stay yours. Nothing is stored unless you save.

Cutoff Promise Checker builds the map in your own browser from the carrier transit table that ships with the page. The cutoff you type, the transit table you paste, the postcodes and the required-by date do not leave the browser while you build the map, and nothing is stored until you press Save. There is no model and no metered call in the tool.

The map is built in your own browser from a carrier table that ships with the page. Nothing you type goes to another origin while you build it, and no answer is generated by a model. The tool does no request to a carrier and reads none of your live orders.

What is stored, and when?

Nothing is stored until you press Save. If you save a store profile, the tool records the label you typed and that store's origin, cutoff, transit table, targets and required-by settings. If you save a check, it records the settings and the map that was on screen. The tool never asks for a customer name, an address, an order number or any customer identifier: a target postcode and a suburb are all the map needs. A saved record is scoped to your account, and one account cannot read another account's saved work.

Where it is kept and who can see it

Four processors are used, and no others:

• Cloudflare serves the pages and runs the small server functions. Cloudflare sees the requests to the site, as any web host does, and keeps short-lived logs.
• Supabase, in the Sydney region, holds the saved store profiles, the saved checks and the account records. The tables are private: the public key cannot read them, only the server functions can, and every read is scoped to the signed-in account.
• Stripe takes the payment and holds the card details and the invoice history. We never see or store a card number.
• SendGrid carries only the sign-in link email, when you ask for one. No store profile, no postcode list and no check is ever put in an email.

There is no advertising, no tracking pixel and no cross-site cookie, and no analytics from a company other than the host. The one measurement is Cloudflare's own web analytics, served by the same host that serves the page, and it is not shared with anyone else. The tool sends no postcode list and no check to any of these processors except the saved rows you asked us to keep.

The exact save and data flow

While you build, everything stays in the tab. Press Save and one request posts your label and settings, and for a check the map on screen, to this site's own server function, which writes one row to Supabase in Sydney under your account and returns nothing else. Press Delete, on the account page or on the record, and the row is removed. No other party in the list above receives the saved rows; Stripe and SendGrid never see them at all.

How long is a record kept?

A saved record stays until you delete it. Delete one record from the page that shows it, or delete the whole account from your account page; deleting the account removes the saved store profiles, the saved checks and the account records, and cancels any subscription at the same time. One entry that a deletion happened, with none of the contents, is kept for two years. Stripe keeps its own record of past payments and invoices, which deleting the account does not remove.

Your choices

You can use the free map, print everything and save nothing. If you have a question about privacy, write to support@theartofservice.com.

Cutoff Promise Checker is operated by The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001, Australia. This page describes what the software does; it is not legal advice.