Privacy notes

Searches

The application sends individual search text to the server function by HTTPS POST and does not intentionally persist raw search text. Vercel and other infrastructure logs may process request metadata such as time, IP address, user agent, route, and response status. Do not paste personal, confidential, or unreleased product information into the search box.

Bulk lookup

Bulk lookup runs in the browser and generates a CSV locally. Do not paste confidential shipment data unless you are comfortable processing it in this browser session.

Catalog Triage validates the CSV locally before checkout. After verified payment, the browser sends small batches of catalog rows to a Vercel server function for matching; the result CSV is assembled and downloaded locally. We do not intentionally store catalog contents in a database, object store, application logs, Stripe metadata, or analytics. The server response is marked no-store. Infrastructure providers may still process request metadata such as IP address, route, time and status. Avoid uploading confidential information if that processing is unacceptable.

Analytics

Google Analytics 4 (GA4) is active on the canonical HS Finder site. It receives enumerated interaction metadata such as traffic kind, input type, query-length bucket, result count, and placement. It does not receive raw search text, a viewed tariff code, email addresses, payment Session IDs, or full URLs. Page-view measurement excludes the query string.

For Catalog Triage, GA4 receives only enumerated offer, checkout, access, run and download events with a row-count range and aggregate result counts. It does not receive filenames, catalog rows or candidate codes.

Links to ArancelMX

Clicking an ArancelMX link takes you to a separate site and controller with its own data handling. HS Finder does not send your raw search text in that handoff.

Mini catalog usage

Mini stores a keyed fingerprint of normalized product facts and a payment reference to enforce the 50-product limit per purchase. Uploaded CSV files and product descriptions are not stored in this ledger. Fingerprints expire seven days after the 24-hour access window ends. Stripe retains payment records under its own policies.