Your ledger stays local; billing stays with Waffo.

Information stored on your device

Trip jurisdictions and dates, one saved scenario, rule-catalog acknowledgement and your light/dark theme preference are stored with browser local storage. Calculations, JSON backups, CSV files and printable reports are created on your device. The site does not receive those entries.

Secure account session and watchlist

When you open a watchlist or start Pro checkout, the site receives the email you enter, normalizes it and stores it with a random user identifier in Cloudflare D1. A signed, HttpOnly browser cookie links the device to that identifier for up to 30 days. Where email sign-in is enabled, Resend receives the destination email to deliver a six-digit code; the site stores a signed representation of the code, its expiry and attempt count, not the readable code. During staged rollout, a first-use session may remain browser-bound until transactional email is enabled, but an existing email-linked account cannot be reopened from a new browser without verification. If you save a watchlist, the site stores only the identifiers of the supported rules you selected. The email is not used for marketing or automatic rule-update emails.

Payments and Waffo

Waffo Pancake hosts the checkout and processes payment, recurring billing, receipts, refunds and payment-method details. Global Day Tracker does not store card numbers. Waffo sends signed order events to the site; the site stores a minimal event ID, order/subscription reference, product ID, billing period and entitlement status to provide Pro access. Review Waffo’s own terms and privacy notice for its processing.

Hosting, security and aggregate product counts

The production host is Cloudflare Pages with a Cloudflare Worker and D1 database. Cloudflare may process network and security information such as IP address, request time, requested URL, browser or device information and security events to deliver and protect the site under Cloudflare’s own terms and privacy notice. For email-code abuse prevention, the site converts email and network address inputs into keyed, non-readable rate-limit identifiers. The site records daily aggregate counts for a short list of product steps—calculator completed, watchlist link clicked, watchlist saved, checkout started and subscription activated—grouped by page and Free/Pro/unknown plan. These counts do not contain email addresses, raw network addresses, trip dates or ledger entries. The site does not add advertising, cross-site tracking or session-replay scripts.

Cookies and local storage

The site uses one strictly necessary signed session cookie for watchlist, Pro checkout and account status. Aggregate product counts do not set an analytics cookie. Browser local storage is used for the local ledger, scenario, rule-version acknowledgement and theme preference. You can clear the session cookie and local records through your browser settings; clearing the session cookie does not itself cancel a Waffo subscription.

Retention and requests

Billing records are retained only as needed to reconcile subscriptions, refunds, disputes, security and accounting obligations. The local ledger is controlled by you. For account or data questions, use the customer/payment support route shown by Waffo’s receipt or checkout; no separate marketing list is maintained by this site.

What we do not promise

The service does not provide legal, tax or immigration advice, and Pro status does not make a calculation official or guaranteed.