Privacy policy
Last updated: October 5, 2026
LandedLlama is a tool for estimating US import duties. This page says, in plain language, exactly what we store, why, and who else sees it. If something here is unclear, ask us — we would rather explain it than have you guess.
What we collect
If you create an account: your email address. If you sign in with Google, we receive the basic profile Google shares — your email address, your name and your profile picture — and nothing else; we never get your Google password or access to your Gmail, Drive or contacts. If you use the site without an account: no name, no email. Only what is described under "Anonymous use" below. What you type into the product: the search terms you use (for example "cotton trousers") are counted, aggregated by day, so we can see which products people look for and improve the results. Those counts are not linked to you or to your account. The shipment values, HTS codes and countries you enter into the calculator are used to compute your result and are not stored. Vercel Web Analytics also records anonymous page visits: the page URL with sensitive query parameters filtered, referrer, browser and device type, and approximate location. These analytics are not linked to your account or email, and the raw IP address is not stored.
Why we collect it
To let you sign in and keep you signed in; to apply plan limits; to manage subscriptions, billing records and support requests; to know which products people search for and which pages are useful; to understand broad traffic sources; and to keep the service running and secure. We do not build advertising profiles and we do not sell or rent your data to anyone.
Anonymous use
Counting free calculations without an account requires recognising a browser for the rest of the day. Two things do that: a cookie holding a random identifier we generate (it says nothing about you), and a one-way hash of your IP address combined with the date and a secret key. The raw IP address is never stored — only that hash, which cannot be turned back into your address and changes every day. Both exist for the daily counter and nothing else.
Who else processes it
We use Vercel for hosting, server logs and privacy-focused analytics; Supabase for database and accounts; Google for Google sign-in if you choose it, and for optional Google Analytics after consent; and Stripe for payment processing, subscriptions, invoices and the billing portal. Card details are entered directly on Stripe and never pass through our servers. Stripe collects the billing details you provide, such as your name, address and optional business tax ID. We send Stripe your account email and an account reference, and keep the customer/subscription references, payment status and subscription dates needed to manage access. Your account displays your invoices from Stripe. These providers also process information under their applicable privacy terms.
Cookies
Necessary cookies support sign-in and the daily calculation counter. We also store your analytics preference for six months. Google Analytics cookies are optional and load only after you choose Accept cookies. You can reject or withdraw that choice through Cookie preferences in the footer. With consent, a short-lived marker counts a completed new account once; it contains no account identifier sent to Google.
Optional analytics
With consent, Google Analytics measures page visits, clicks from guides to the calculator, successful manually submitted estimates and completed new registrations. We send sanitized public URLs, locale, calculation mode and known guide IDs, not shipment values, quantities, product or HTS inputs, emails or account identifiers. Google processes browser/device information and a pseudonymous analytics cookie. Advertising features and automatic page/form measurement are disabled. Vercel continues providing privacy-focused hosting analytics.
How Google uses information from sites that use its servicesHow long we keep it
Account data is kept while the account exists. Billing and transaction records may need to be retained after an account is deleted to meet accounting, tax, fraud-prevention or dispute requirements. Daily usage counters and IP hashes support the daily allowance. Vercel Web Analytics resets and discards its anonymous session identifier after 24 hours. Aggregated pageview and search counts do not identify you and are kept as product statistics.
Your data is yours
Write to us to request access, correction, export or deletion of your personal data and account. We may need to verify that you own the account. Cancel any active subscription through Account before requesting account deletion, or ask support to help. Closing an account does not erase billing records that must be retained or automatically request a refund. Aggregated statistics that never identified you are unaffected.
Children
This is a tool for businesses importing goods. It is not directed at children and we do not knowingly collect data from anyone under 16.
Changes
If this policy changes in a way that affects you, we will update the date at the top and, for anything material, tell account holders by email.
Questions, or want your data deleted? Write to info@rpmasolutions.com and we'll answer.