Privacy & browser storage
Last updated: 16 October 2026.
This page explains the privacy controls and data handling implemented by MUP Calculator. You can use the manual calculator and scan tools without enabling optional browser storage.
Your choices
Accept optional enables the optional categories below. Reject optional leaves them off. Customise lets you choose each separately. Closing the popup without choosing leaves optional storage off. Your choice applies to this browser, not automatically to another device.
Browser storage inventory
| Item | Purpose | Control |
|---|---|---|
| mup.privacy.v1 | Records your choice, version and date for up to 180 days. | Essential preference record |
| mup.nation | Remembers the selected nation. | Remember preferences |
| mup.recent | Up to three recent calculations on this device. | Remember preferences |
| mup.analyticsSession | Random visit identifier, last activity and referring hostname; expires after 30 minutes inactivity or a UTC date change. | Visitor statistics |
| mup.productDraft | The latest unconfirmed product details on this device. | Automatic draft saving |
These app records use local storage rather than advertising cookies. Rejecting or disabling an option removes the corresponding app records from this browser. Changing your choice does not delete products you deliberately saved in your account.
Images and camera
Uploaded images and live camera frames are processed in your browser. This app does not upload or publish those images. The camera runs only after you request it and grant browser permission. Recognition may be wrong; check the product name, size, ABV and quantity before confirming.
Requested external services
When you request a barcode lookup and no local catalogue match is found, the barcode is sent to Open Food Facts. Label reading downloads OCR software and English language data from third-party CDNs. Those services receive normal connection information such as your IP address. The app does not send your label image to them.
Open Food Facts privacy information
Sign-in and account records
Sign-in is provided through ChatGPT (OpenAI), and hosting is provided through the Sites deployment platform using Cloudflare. Authentication and hosting services may use necessary cookies or similar storage for sessions and security; these are not controlled by the optional app switches. This app receives your site-specific account identifier and available identity information to manage your account and administrator permissions.
When automatic draft saving is enabled, detected product details are also saved privately in your signed-in account. Confirm & save deliberately saves your confirmed product and calculation history. Private product drafts and saved products can be deleted individually in Manage saved products & history. Clear history removes your account's recent calculation history. Product records remain until removed; there is no automatic account-record expiry implemented.
Private shop workspace
When you deliberately create shops or save products and CSV rows in your signed-in workspace, the app stores shop name, nation, product details, selling prices and rule/label review markers privately under your account. CSV files and shelf photographs are not stored. Mapped CSV rows are sent to the server to calculate a preview; only rows you explicitly confirm and save are stored as shop products. Shelf photographs are processed locally, and their reviewed product details are sent only when you save them. You can delete shop products individually. Workspace alerts run when you open or refresh the page, rather than by email or background monitoring.
Public product pages
Only confirmed product details submitted for publication and approved by an administrator are public. The public page includes product name, barcode when supplied, size, quantity, strength, approval date and calculated prices. It does not include the submitting account's name or email. Photos remain private. An administrator can withdraw a public product page.
Optional visitor statistics
Only when Visitor statistics is enabled, the app records page views and a short-lived random session identifier. It also records country when supplied by trusted hosting metadata, referring hostname without its path or query, and broad device type. It does not store your IP address, account identifier, email, precise location or raw browser user-agent in the analytics table.
The browser record mup.analyticsSession keeps the random identifier and last-activity time. A new session starts after 30 minutes of inactivity or at the next UTC date. The server hashes the identifier with the date. Administrator reports show consenting visits, not an exact count of people. Countries are estimates and may be Unknown when hosting does not provide the information.
Reports cover at most 30 days. Records older than 30 days are excluded and cleaned up in batches as new analytics events arrive. Disabling Visitor statistics removes the browser identifier and stops further collection. Previously collected records remain until that cleanup; they are not linked to your account. No advertising trackers are installed.
Changing or withdrawing your choice
Use Privacy settings in the footer at any time. Optional storage is disabled immediately and the corresponding browser records are cleared. Existing account drafts can be removed using the account controls. Essential sign-in and security functions remain available.
Return to the calculator and account controls · ICO information for individuals