Privacy Policy

The data controller for this site is VisaGPS, 10685-B Hazelhurst Dr #43316, Houston, TX 77043, USA. You can reach us about any privacy matter at [email protected].

• Tool inputs and your tracker: Priority dates, receipt numbers, and saved tracker cases are processed and stored in your browser (localStorage). Nothing is sent to our server unless you submit a form or you switch on tracker backup, described below.
• Tracker backup (only if you turn it on): If you ask us to back up your tracker, we store your email address and an encrypted copy of the cases you have entered - priority dates, receipt numbers, form types, and the milestone dates you record. This is off by default and never happens until you tick the consent box and confirm the address by clicking a link we email you.
• Email subscriptions: If you subscribe to Visa Bulletin alerts, we store your email address in our email service (Mailjet).
• Analytics: We use privacy-respecting analytics (Google Analytics 4 with IP anonymization, and optionally Microsoft Clarity for usage understanding). These are analytics tools, not advertising trackers: we use them only to understand which tools are used and where pages break, never to build advertising profiles or retarget you. Google Signals (cross-device advertising features in GA4) is turned off. No cross-site tracking.
• Server logs: Standard web server logs (IP, user agent, timestamps) retained 30 days for security and abuse prevention.

• Social Security number, government-issued ID number, or any other sensitive personally-identifying data.
• Bank, financial, or credit information.
• Location data beyond what you type into the calculator (and that stays in your browser).

The tracker works with no account at all. Backup exists for one reason: people lose the device their case is saved on. Because immigration case details are sensitive, it is built to hold as little as possible:

• Opt-in twice. Nothing is stored until you tick the consent box and click the link we email you. Requesting a link stores nothing readable on its own.
• No password. We email you a single-use sign-in link instead, so there is no password of yours for us to store or leak.
• Encrypted at rest. Your cases and your email address are encrypted with AES-256-GCM before they are written to the database. The key lives in the server environment, not in the database, so a stolen copy of the database is not readable on its own. Your address is indexed by a keyed hash, so a stolen copy cannot be mined for a list of email addresses either. This is not end-to-end encryption: we hold the key and could technically decrypt your record, and we access it only if you ask us to for support or if we are legally compelled.
• Only ever your own tracker. The stored cases are used to show you your own tracker on your own devices. They are never sold, never shared with advertisers, law firms or anyone else, never used to train anything, and never sent to USCIS or any government agency.
• Yours to take and to destroy. Download a copy at any time from the tracker as a plain JSON file, and delete everything with one button. Deletion is immediate and cannot be undone.

• To send you the alerts you opted in for - typically when a new Visa Bulletin moves your category or a new tool ships.
• To understand which tools are most used so we can prioritize improvements.
• To prevent abuse (rate limiting, spam protection).

• Email address: We keep your email until you unsubscribe. After you unsubscribe, we retain it only on a suppression list so we can comply with our legal obligation under CAN-SPAM never to email you again.
• Server logs: Retained 30 days, then deleted.
• Tool inputs and tracker (backup off): Never leave your browser, so there is nothing for us to retain.
• Tracker backup (backup on): Kept until you delete it. Deleting it from the tracker erases the account, the stored cases, and every active session immediately and permanently. Sign-in links expire after 20 minutes and an address that never confirms is purged within 30 days.

• Consent: We send marketing and rate-change email only because you opted in. You can withdraw consent at any time by unsubscribing, with no effect on email already sent.
• Explicit consent (Article 9): Tracker backup stores case details that can reveal your immigration status, so it runs only on the explicit consent you give when you switch it on. Withdraw it at any time by deleting your data in the tracker, which erases the stored record.
• Legitimate interest: We keep short-lived server logs to secure the site and prevent abuse, which is in our legitimate interest in running a safe service.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the right to be forgotten).
• Restrict how we process your data.
• Object to processing based on legitimate interest.
• Port your data, receiving it in a portable format.
• Complain to a supervisory authority (for EU/UK residents, your local data protection authority).

You can unsubscribe from email at any time using the link in every email we send, or exercise any of the rights above by emailing [email protected]. We respond to all such requests within 7 business days.

• Cloudflare for DNS and edge security.
• Mailjet for email delivery.
• Google Analytics 4 for usage statistics (IP anonymized).
• Microsoft Clarity (optional) for understanding tool usage flows.