Terms & privacy.
These legal texts are available in English only for now. A translation will follow before paid plans open.
CurdLedger is run by Emanuil Yankov, Sofia, Bulgaria (company registration in progress). Contact: hello@curdledger.com. We answer privacy requests within 30 days.
Who runs CurdLedger
CurdLedger is made and run by Emanuil Yankov in Sofia, Bulgaria. The company that will run CurdLedger is being registered; until it is, Emanuil Yankov is personally responsible for this site and for the personal data described below. Email: hello@curdledger.com. When the company is registered, its name, registered address and registration number will be added here before any paid plan opens.
Terms of Service
CurdLedger helps dairy producers estimate product costs and margins from their own inputs. Sample products, templates and figures are illustrations, not production instructions, market prices, accounting records or tax advice. Check your inputs and decisions yourself.
Using CurdLedger
The calculator is free and works without an account; it keeps your numbers in your browser on your device. An account uses sign-in with a one-time code sent to your email address. Keep access to that email account safe, turn on two-factor protection if you want an extra step, and keep your own backups. CurdLedger is meant for adults running a business.
Paid plans
Paid plans (Standard and Pro) are not open yet and nothing can be bought today. When they open, the plan, recurring price, billing interval, trial, taxes and renewal terms will be shown in the hosted checkout before you pay. Purchases will be sold through Link, Stripe’s Merchant of Record service (Stripe Managed Payments), under its checkout terms, and these terms will be updated with refund and withdrawal rules before the first sale.
Once you subscribe, plan changes and payment details are managed in the Stripe billing portal or on link.com. Cancelling stops future renewals; access continues until the paid-through date. An unpaid or ended subscription stops cloud saving, but you can still read and download the data already in your account.
Deleting your account
Deleting your account ends cloud access at once and cancels renewals before your app data is removed. It is not a refund request. Nothing in these terms limits rights you have by law.
Changes
If these terms or the privacy notice change in a way that matters, the version above changes and you will be asked to accept the new version before your next checkout.
Privacy Notice
Emanuil Yankov (see Who runs CurdLedger) decides how the personal data below is used. Stripe handles purchases, tax and its own transaction records under its Privacy Policy.
What we process
- Calculator: your products, costs and history stay in your browser. They reach us only if you sign in and choose Save to cloud, which needs a paid plan.
- Sign-in: your email address, sign-in times, interface language and a random internal identifier. There are no passwords; sign-in codes and session tokens are stored only as hashes.
- Account: policy acceptance, privacy choices, privacy requests and security activity (for example sign-ins and two-factor changes). Authenticator secrets are encrypted; recovery codes are stored as hashes.
- Subscriptions (when paid plans open): subscription identifiers and status, billing dates and invoice amount, currency and tax. Card details never reach us. Stripe event identifiers are kept for 30 days to avoid processing an event twice.
- Founding list: if you join, your email address, the country and product type you choose, whether you are interested in the founding offer, your language, the campaign that brought you (if any) and the wording you agreed to. We send one email to confirm your address; if you do not confirm, the entry is deleted after 30 days. Confirmed addresses get emails about the launch and the founding offer only.
- Monthly price check (subscribers): a monthly email built from your last cloud save, with a one-click way to stop it.
- Emails to producers: we write once to dairies and cheesemakers whose business email address is published on their own website or in a public directory, to tell them about CurdLedger, and at most one short reminder where the law allows it. We keep the business name, address, country, the source where we found it and any reply. Reply “no” or “stop” and we will not write again; we then keep only the address on a do-not-contact list.
- Visit statistics: Cloudflare Web Analytics counts page views, the referring site, country and device type, without cookies. CurdLedger also counts a few actions per day (page opened, video played, calculator opened, product added, list joined or confirmed) with the country and interface language only; no cookie, IP address or identifier is stored with these counts. Add ?notrack=1 to any page address to stop the counting on that browser; it also stops when your browser sends Global Privacy Control.
- Abuse protection: to limit repeated requests, we keep short-lived counters keyed by a secret-keyed hash of your network address and of your email inbox. They cannot be turned back into the address and are deleted within a day. To stop a free trial being used twice, we keep a secret-keyed hash of your inbox for two years after a trial starts, also after you delete your account.
Why (legal bases)
Sign-in, account, cloud workspace and subscriptions: to provide the service you ask for (contract). Founding list: your consent, which you can withdraw at any time. Emails to producers, visit statistics, counts and abuse protection: our legitimate interest in introducing CurdLedger to the businesses it is made for, knowing how the site is used and keeping it safe; you can object at any time. Records kept for tax or accounting: legal obligation (Stripe as Merchant of Record keeps the purchase records).
Who else processes it
Cloudflare hosts the site and the database and provides the visit statistics. Resend sends our emails (sign-in codes, founding-list confirmations, monthly price checks and emails to producers). Stripe and Link handle payments when paid plans open. These providers may process data outside the EU under their standard contractual clauses. We do not sell personal data and there are no advertising trackers.
How long
Account and workspace data: until you delete them. Sign-in records without an account: 30 days after the last sign-in. Unconfirmed founding-list entries: 30 days. Security records and privacy request references: 90 days. Stripe event identifiers: 30 days. Trial markers: 2 years. Sign-in codes expire after 10 minutes, sessions after 30 days without use, authenticator verification after 30 minutes, browser privacy choices after 180 days. Short security logs at our host are kept for a few days.
Your rights
You can ask for access, a copy, correction or deletion of your data, object to processing based on legitimate interest, withdraw consent and complain to a supervisory authority (in Bulgaria: the Commission for Personal Data Protection, cpdp.bg). Use Account → Privacy to download or delete your data at once, also without an active subscription and even if you only signed in without creating an account, or write to hello@curdledger.com. Deleting your account also removes your founding-list entry. Downloaded backups and data on your other devices are yours to delete. CurdLedger does not knowingly collect children’s data or sensitive health data.