Legal
Data controller
The data controller for any personal data processed through WIMSTA accounts is WIMSTA. For any privacy request — access, export or deletion — contact privacy@wimsta.com.
WIMSTA is currently a free, non-commercial project — no ads, payments or subscriptions. Full operator details (registered name, address, business ID) required for commercial services under the EU e-commerce directive will be published if and when paid features launch.
Privacy
Without an account, the calculators run entirely in your browser — the numbers you enter are computed locally and are not sent to a server. Anything you save stays in your own browser (localStorage) only.
When you sign in (optional and passwordless — either an email link or Continue with Google), we store an account so your data follows you across devices. We store your email address and the data you create — saved calculator results, food-diary entries, body measurements and any progress photos you upload. It is held in Supabase, in the European Union (Frankfurt).
If you choose Continue with Google, we ask Google only for your email address and basic profile (your name, and your avatar if you have one) — nothing more. We never post to your Google account or read any of your other Google data. Signing in with Google and with the email link to the same address reaches the same one account — we don't create a duplicate.
- Legal basis (GDPR Art. 6): your consent, given when you sign in — withdraw it any time by deleting your account.
- Processors: Supabase (database + authentication, EU), Resend (sending your sign-in email), Google (only if you choose Google sign-in), Cloudflare (hosting / CDN). No advertising or profiling processors.
- Retention: until you delete it — there is no fixed expiry; your data lives only as long as your account does.
- Your rights (GDPR Art. 15–20): access, export and erasure. From your account you can export everything as a file and delete your account (which erases your rows, uploaded files and any Google-linked sign-in) at any time, or email privacy@wimsta.com.
- Sign-in security: no password. The email link is single-use and expires in 15 minutes; Google sign-in uses Google's own account security.
Your body measurements and photos are private by default: never shown publicly, never used for advertising, and never pooled with other people’s data — they exist only in your own account.
When you send feedback (the feedback form or a “report an error” link), we store your message so we can act on it, and — only if you choose to give one — your email address, used solely to reply. For diagnostics we also keep the page you wrote from, your language and your browser’s user-agent. No login is required to send feedback. It is held in Supabase (EU, Frankfurt), kept only as long as needed to handle your message, and you can ask us to delete it at privacy@wimsta.com. The form uses no third-party trackers.
We use Plausible Analytics for aggregate traffic statistics. Plausible is cookie-free and collects no personal data, so no consent banner is required. We do not use advertising trackers or third-party profiling.
Not medical advice
Every calculator provides estimates based on published formulas, for information only. WIMSTA is not a medical device, does not diagnose, and does not replace professional advice. Discuss decisions about your weight, health or medication with a doctor.
Data sources & attribution
Formula references are cited on each calculator and formula page. Body-fat norms follow Gallagher D. et al. (2000), Am J Clin Nutr 72(3):694–701. Food data (USDA FoodData Central, Open Food Facts under the ODbL, BEDCA) and weather (Open-Meteo, CC-BY) are credited in full on our data sources page.