Privacy Disclosure

sentencing.us uses the information described below to provide and save sentencing calculations, authenticate users, make requested AI suggestions, protect the service against abuse, and measure activity and operating costs. You can use the calculator without an account. AI analysis requires a signed-in account.

Account and passkey information. If you register, we store your chosen username, an internal account identifier, your membership tier, and your registered passkeys’ public credentials and technical records. These records include credential identifiers and public keys, creation dates, passkey names, signature counters, connection methods, verification and backup indicators, and registration data supplied by your browser and authenticator. We use them to verify sign-ins, manage your passkeys, and apply your account’s features and storage limits. A passkey’s initial name may identify its authenticator or provider; you can rename it.

We do not ask for your real name, email address, mailing address, phone number, or payment details. We do not receive your passkey’s private key, fingerprint, face scan, or device PIN. A username or passkey label can nevertheless identify you if you choose one that does. Your device or passkey provider handles any biometric verification and passkey synchronization under its own policies.

Calculations and information you enter. We store calculations on our servers as you work, including when you use the calculator without an account. Stored information includes the calculation’s name and identifier, its account or anonymous browser owner, the Guidelines Manual edition, counts of conviction, questions and answers, grouping choices, criminal-history entries, and creation, update, first-use, and expiration timestamps. We use this information to calculate sentences, restore your work, produce reports, and support edits, duplication, and imports. Calculations are private to their owner within the site.

Calculation names, answers, criminal-history entries, and conduct descriptions can contain sensitive information about you, defendants, victims, or others. The fact that registration does not require a real name does not make information entered into a calculation anonymous. Use a non-identifying calculation name where possible: the name also appears in the page URL, which can appear in browser history and request logs.

Anonymous work is associated with an identifier stored in your browser. When you sign in, eligible anonymous calculations changed within the preceding hour are associated with your account.

Conduct descriptions. We store the free-form conduct description separately from the saved calculation and use it to make suggestions for that calculation. Its expiration is set to one hour after you save it and renewed when an AI request uses it, including automatic follow-ups. Once expired, the application treats it as absent and deletes it when next retrieved. Automatic database cleanup also removes expired description records, but that cleanup is asynchronous: physical deletion of an unread record can occur later than the one-hour deadline. Database cleanup typically occurs within 24 hours after expiration, or about 25 hours after the last save or AI use, but can take longer. There is no guaranteed maximum deletion time for automatic cleanup.

The page shows the remaining time and provides a button to delete the description immediately. Descriptions are excluded from downloaded Word reports, and are not copied when you duplicate a calculation. Accepted answers and names remain in the calculation after the description expires. Unaccepted AI suggestions are held in the open page, rather than saved as a suggestion history in our database. Google’s handling of information sent for analysis is described under AI Policy below.

AI usage and service statistics. We retain monthly records associated with your account showing analysis and follow-up usage, model names, call counts, and quantities of input, cached input, output, and reasoning tokens. These records enforce usage limits, show your remaining allowance, and let the site administrator monitor costs. A refused request may still contribute to token totals even when its allowance charge is refunded. These usage records do not store descriptions or suggestion text.

We also retain daily activity totals and monthly AI totals. These measure calculations first used, analyses, follow-ups, model token consumption, visits to the front page, accounts created, and which Chapter Two sentencing guidelines calculations reached. They contain no calculation names, descriptions, or answers, and no account identifiers. Aggregate totals remain after calculations or accounts are deleted. Administrative membership and usage pages are restricted to the site administrator.

Visitor addresses in site statistics. The daily totals described above also record the IP address of each visit to the front page, as a count of visits per address for that day. This is separate from the hosting logs described below: it is stored in the site’s own database, and it is kept as running totals rather than as a list of visits, so it records how many times an address reached the front page on a given day and not what any visitor did afterwards. It is not linked to an account, a calculation, or a description. The site administrator can see the most frequent addresses for a chosen period. Addresses are recorded only for the front page, and only until a day has recorded a set number of distinct addresses, after which further visits are counted without their address being stored. An IP address can identify you or your network. Recorded addresses are deleted 90 days after the day they were recorded, by an automatic database policy rather than by request; the visit counts they contributed to are aggregate figures with no address in them and are kept. Deleting your account or your calculations does not remove either.

Request and diagnostic information. Our hosting service processes technical information such as request times, IP addresses, requested URLs, HTTP methods, browser information, response status, and timing. We use request and error logs to operate, secure, and troubleshoot the service. The application also logs analysis type, question and count totals, application-note sizes, token usage, and failures. Failed AI requests can include a short excerpt of the provider’s error response in diagnostic logs. The application does not routinely log conduct descriptions or successful AI replies, but the description’s expiration does not erase separate request or diagnostic logs. Log retention depends on the hosting configuration. Google Cloud Run logging documentation.

IP addresses and, for some signed-in requests, usernames are also used for temporary request-rate limits. The sign-in protection system keeps short-lived request counters and proof-of-work challenge records to deter automated abuse.

Cookies and browser storage. All cookies are strictly necessary to provide a service explicitly requested by the user. We use essential cookies to recognize your anonymous work, keep you signed in, complete passkey sign-in and registration, prevent forged requests, and carry temporary site messages. The anonymous cookie (sai_anon) has a renewable 72-hour lifetime. The authentication cookie (sai_auth) has a renewable 30-day lifetime; signing out clears authentication. Other security and temporary-state cookies support those functions.

We also save whether you have expanded or collapsed the Report section in your browser’s local storage (sai.reportOpen). This preference stays in that browser until cleared and is not sent to our servers. We do not use advertising cookies, third-party analytics scripts, or cross-site tracking pixels. You can clear cookies and local storage through your browser, but doing so can sign you out and remove access to anonymous work; it does not itself delete server records.

Storage, service providers, and deletion. We use Google Cloud to host the application and to store account, calculation, description, and usage records. Google Cloud also supports logging, security, and the AI processing described below. These services process information to provide the site’s functionality. The application does not sell user information or send it to advertising services.

New calculations that have not been used are scheduled to expire after four hours. Once used, anonymous calculations are scheduled to expire 72 hours after their last change; normal members’ calculations generally expire five days after creation. Paid account calculations have no automatic expiration while in those tiers. Tier changes can adjust expiration dates. Automatic calculation deletion relies on asynchronous database cleanup, so an expiration date is not a guarantee of deletion at that exact instant.

Your ability to delete data

You can delete the data you have stored with the site at any time using these controls, without contacting the administrator or waiting for automatic expiration:

• Individual calculations: Open the calculations list at /calculations and choose Delete beside a calculation. This removes the calculation and its separately stored conduct description.
• Calculations in bulk: In the same list, select the calculations you want to remove, or use the select-all checkbox, then choose Delete selected and confirm. This removes the selected calculations and their descriptions.
• Individual conduct descriptions: Choose Delete now beside the description on the calculation page. This deletes the stored description while keeping the calculation and its accepted answers and name. Further AI analysis requires a new description.
• Your account: Open the account page at /Account and choose Delete my account. Confirm with one of your passkeys. This deletes your account, registered passkey records, calculations and their associated descriptions, and account-linked AI usage history, then signs you out.

These controls delete records directly from the site’s active database when the request succeeds; they do not wait for the automatic cleanup schedule. Deletion cannot be undone. Save any calculations or reports you want to keep before deleting them or your account. Anonymous visitors can delete calculations accessible through their browser’s anonymous identifier; clearing that browser’s cookies first can remove their access to those controls.

Account and account-linked usage records otherwise have no automatic expiration. Deletion does not remove aggregate activity and cost totals that contain no user identifiers, or separate operational logs before their applicable retention periods end. It also does not erase provider-side AI caches or logs, files you have downloaded, or copies you have shared. Word reports omit your account identifier and description, but contain calculation names, answers, and related information.

AI Disclosure

At your request, the site uses Google’s Gemini model through Vertex AI to analyze conduct descriptions and suggest answers. Requests send the description, the relevant question catalog and choices, existing counts and statutes, grouping context when relevant, and applicable Guidelines commentary. We do not add your username, account identifier, passkey records, or browser IP address to the model prompt. Personal information you put in the description is sent as part of that description. Requests are sent to a Google endpoint in the United States.

After you request an analysis, changes that open new questions can trigger automatic follow-up requests using the description again. Deleting or allowing the description to expire prevents further analysis from that description.

We do not use descriptions to train an AI. Google states that it does not use customer data to train or fine-tune its models without permission or instruction. This is separate from retention: Google documents temporary in-memory caching, with a 24-hour expiration, and possible prompt logging for abuse monitoring under applicable terms. Deleting a description from this site does not itself delete provider-side caches or logs. Google’s data-use and retention documentation.

You review and apply suggested answers, names, additional counts, and grouping changes yourself. There is one limited exception: after you accept an AI-suggested statute, the site may automatically resolve its Appendix A listing and guideline selection through another AI request. Those choices are labeled and remain editable. Other newly opened questions receive suggestions for you to review.

September 7, 2026