Privacy policy

The word counter, sentence counter, paragraph counter and reading time calculator run entirely in your browser. The text you paste into them is never transmitted, never reaches a server, and cannot be logged — the counting code runs on your own device.

Every other tool sends the text you submit to a large language model for processing and streams the result back to you. This is necessary for the tool to work: a grammar checker cannot correct text it has not received.

GrammarPlus does not write the text you submit, or the result, to a database. Requests are served with Cache-Control: no-store, so the response is not cached by us or by intermediaries.

The models are run through the commercial APIs of OpenAI, Google and Anthropic, depending on the tool. All three state that text submitted through their APIs is not used to train their models — API traffic is treated differently from their consumer chat products in this respect. Each may hold a request briefly for abuse monitoring before deleting it; the current window is set by the provider, and their own terms govern it.

The practical consequence: your text leaves this server, is processed by one of those three, and is not retained by GrammarPlus at any point. If you would not paste something into a third party's system, do not paste it here.

Three things, all of them for keeping the free tools usable rather than for building a profile of you.

• A random browser ID. A UUID generated in your browser and kept in localStorage under gp_client_id. It is sent with AI requests so the rate limiter can recognise a returning browser. It contains no personal data and identifies a browser, not a person. Clearing your site data removes it, and the tools keep working.
• Rate-limit counters. Request timestamps and word totals, keyed by IP address and by that browser ID, held in a short-lived store so per-minute and per-day limits can be enforced. They expire on a rolling window.
• Your theme choice. Light or dark, kept in localStorage so the page does not flash the wrong theme on load. It never leaves your browser.

Rate-limit counters carry a 24-hour expiry and are deleted automatically once it passes — nothing is kept beyond the window the daily limit needs. Your IP address also reaches the reverse proxy in front of the app, as it does for any website you visit, and appears in its access log; application container logs roll over at 1 MB and are not archived.

This site sets no cookies. There is no advertising, no third-party tracking script, and no consent banner because there is nothing to consent to.

Page views are counted with a self-hosted Plausible Analytics instance, which is cookieless and records aggregate data — page URL, referrer, country, browser and device type — without a persistent identifier and without building a profile across sites.

These tools are for users aged 18 and over. The service is not directed at children, and we do not knowingly collect data from them — which is straightforward here, because no account is created and the only identifier held is a random browser ID you can delete yourself.

Because the only identifier held is a random browser ID you can delete yourself, most data-subject requests resolve by clearing your site data in the browser. To ask about anything else, email mail@grammarplus.app.

Where the GDPR applies, the lawful basis is legitimate interest: the browser ID and the rate-limit counters exist only to deliver the tool and to keep it available to everyone, and no profile is built from them. GrammarPlus is established in Georgia and has not appointed an Article 27 representative — the processing is occasional, involves no special-category data, and presents a low risk to the people concerned.

Requests are answered within 30 days at mail@grammarplus.app. If you are in the EU, the UK or the EEA and are unhappy with the response, you may complain to the data-protection supervisory authority for your country of residence.

Material changes will be reflected here with a revised effective date.