Privacy
Privacy at Carina Dataworks
A plain-language summary of what our studio site and apps collect, where it goes, and how to delete it. We collect as little as we can, we never see your card, and we never sell your data.
Last updated: November 2, 2026
Who we are
Carina Dataworks
-
An independent software studio
Carina Dataworks is a small independent software studio in Connecticut, founded by Kyle Guy. We make practical tools for small businesses and sellers, plus a couple of free just-for-fun projects. See the About page.
-
What this page covers
This page covers this studio site (carina-dataworks.pages.dev) and all of our apps. Each app also has its own privacy policy with the full details, and if anything here is less specific than an app’s own policy, the app’s policy is the one that applies to that app.
- LevelPenny: privacy policy
- SkuClinic: privacy policy
- CartonClinic: privacy policy
- Carina Casino Night: privacy policy
- Cozy Xmas Cats: no account and nothing stored (see below)
What we collect
The short, honest list
-
Your account (LevelPenny, SkuClinic, CartonClinic)
Your email address and whether you have confirmed it. Your password is stored only as a scrambled (salted) hash, so we can’t read it. Sign-in sessions are stored only as a hash of the token. We also keep your plan status, trial and renewal dates, and the Stripe customer and subscription IDs.
-
Your synced app data
While your free trial or subscription is active, a copy of the data you save in the app is kept on our servers (run by Cloudflare) so it syncs between your devices, plus the last few earlier copies as backups. LevelPenny: your business profile, jobs, estimates, invoices and customer details. SkuClinic: your workspace (stores, products, settings, snapshots and column mappings); the files you import are read in your browser and never uploaded. CartonClinic: your SKU library, boxes and stock levels.
-
Forms you send us
If you use the LevelPenny Pricing questions form or the SkuClinic signup or feedback form, only what you type there is sent. It is emailed to carinadataworks@gmail.com and saved in a private Google Sheet in the Carina Dataworks Google account, using Google Apps Script, so Google processes it.
-
Email we send you
Account email only: confirmation links, password-reset links and free-trial reminders, sent from carinadataworks@gmail.com through Google. Links are single-use, expire, and we store only a hash of each.
-
Small security and trial records
Short-lived, hashed counters of sign-in and password-reset attempts to stop password guessing, deleted within a day. And, so a free trial can’t be restarted, a one-way hashed form of an email address and the date its trial ended, kept even after an account is deleted. It can’t be turned back into your email.
-
The free projects
Carina Casino Night needs no account: chips and settings stay in your browser. An optional account stores a username (no email is asked for), a hashed password, your game save and sign-in sessions. Multiplayer tables connect players’ browsers directly (WebRTC) with help from the public PeerJS service, so players at the same table can see each other’s IP addresses. Cozy Xmas Cats is a single animated page: it has no account, no forms, and doesn’t store or send anything about you.
Payments, analytics and what we don’t do
No card data, no ads, no selling
-
Payments go through Stripe
Paid plans are handled securely by Stripe. Your card details go straight to Stripe on its own pages; Carina Dataworks never sees or stores your card number. We receive only your email, the plan you chose, the subscription status and dates, and the Stripe customer and subscription IDs. No card is needed for a free trial.
-
Cookieless visit counting
This site, LevelPenny and SkuClinic use Cloudflare Web Analytics to count page visits. It doesn’t use cookies, doesn’t track you across sites, and never receives what you type into an app or the files you open. CartonClinic, Casino Night and Cozy Xmas Cats use no analytics. Our apps don’t set cookies; signing in keeps a token in your browser’s local storage. Stripe’s own checkout pages may set cookies for fraud prevention.
-
Hosting
Our sites are hosted on Cloudflare Pages and our account service on Cloudflare Workers with a Cloudflare D1 database. Cloudflare may keep standard server logs (such as IP address, browser type and time of the request) under its own privacy policy.
-
What we never do
We don’t sell your personal information, share it for advertising, or show ads. We use your data only to run the apps, to reply to you, and to improve the apps.
Your choices
Deleting your data and asking for a copy
-
Delete your account yourself
In LevelPenny, SkuClinic and CartonClinic, use Delete account on the app’s Account screen. It deletes your account, your synced data and its backups right away and cancels any subscription. Stripe keeps records of past payments as the law requires. Carina Casino Night has a Delete account option under ★ Account too. Data saved in your browser stays there until you clear this site’s data in your browser settings.
-
Ask us
To see, get a copy of, or delete anything linked to your account or anything you sent through a form, email carinadataworks@gmail.com. The SkuClinic and CartonClinic policies commit to doing this within 45 days, and LevelPenny’s does for questions you sent us. Depending on where you live (for example California or Connecticut), you may have other rights under state privacy law; ask and we will help.
-
Children
Our business tools are not meant for children under 13, and we do not knowingly collect information from them. If you think a child sent us something, email us and we will delete it.
-
Changes
If this page changes, we’ll update the “Last updated” date above. Each app’s policy explains how account holders are told about changes that matter for that app.