What we collect, and what we do with it.

What we collect when you submit

• Your email address.
• The role and category you selected.
• Your years-of-experience bucket and your hourly rate.
• Whether you submitted in USD or PHP.
• The IP address and browser user-agent that made the request.
• Timestamps for when you submitted and when you confirmed the consent box.

Why we collect it

Your role, experience bucket, and rate are aggregated into the peer benchmarks shown to other freelancers. Aggregation requires at least five submissions before a role shows any statistic — we don’t reveal individual rates.

We send your benchmark report to your email address and store it so the unique link in the email keeps working if you come back later.

IP address and user-agent are used only for rate-limiting and abuse prevention. They are not shared or used to profile you.

Who processes your data

We use a small set of third-party providers to run the service. Each only sees the data it needs:

• Supabase — database where submissions and aggregated stats are stored.
• Resend — sends the report email to your inbox.
• Cloudflare Turnstile— verifies you’re not an automated bot when you submit.
• Vercel — hosts the site.

What we don’t do

• We don’t sell your data.
• We don’t share individual submissions with anyone.
• We don’t run ad-tracking or third-party analytics scripts.
• We don’t profile you across other sites.

Cookies

After you submit, we set one signed, HttpOnly cookie that proves your browser is the one that created a given report. It expires after 30 days and contains no personal data — only a signed reference to the report ID. This is what lets you re-open your report from the email link and trigger a resend.

How long we keep it

We keep your submission for as long as it’s useful to the benchmark — there’s no fixed expiry, because a rate from last year still says something about the market.

That said, it’s your data. Ask us to delete it and we will.

Deleting your data

Email us from the address you submitted with, and we’ll confirm and remove your data within 14 days. Writing from that same address is how we know the request is really yours — we won’t ask you to prove anything else. Plus-addressing and dots are fine: if you submitted as you+rates@gmail.com, writing from you@gmail.com still works.

What goes:

• Your email address, IP, and browser user-agent.
• Your rate submission and the saved report that went with it.
• Your rate stops counting toward the peer benchmark at the next nightly rebuild — within a day.

Any report link we emailed you stops working once the submission is gone.

One exception, so there are no surprises: if an email to you ever bounced, or you marked us as spam, we keep that address on a short do-not-email list. It holds nothing but the address and the reason, and it’s there so we don’t accidentally email you again — deleting it would undo the very thing you asked for. Say the word and we’ll clear that too.

How to reach us

Deletion requests, a copy of your data, or any other privacy question — contact us. One inbox, real humans.