• Home
  • Privacy Policy

Privacy Policy

Effective Date: July 1, 2026 · Last Updated: October 12, 2026

Khulasa (khulasa.website, "we," "us," or "our") operates an independent automotive finance and vehicle-ownership research platform offering browser-based calculators and editorial analysis. This Privacy Policy explains precisely what data is processed when you visit khulasa.website, how our client-side calculators work, how third-party advertising partners (including Google AdSense) use cookies, and how you can exercise your privacy rights under US state laws (including the CCPA/CPRA) and international frameworks (including the GDPR).

1. How Our Automotive Calculators Process Your Numbers (100% Browser-Side Execution)

All 15 automotive and financial calculators on khulasa.website (including our Fuel Cost, Car Loan, Monthly Car Payment, Car Affordability, Lease vs. Buy, EV vs. Gas, Car Depreciation, Trade-In Equity, Registration & Sales Tax, Maintenance Cost, Cost Per Mile, and Total Cost of Ownership calculators) execute locally inside your web browser using client-side JavaScript.

  • Zero Server Storage of Calculator Inputs: The numbers you enter into our calculator fields (such as your monthly income, existing debt obligations, loan balance, interest rate, vehicle price, trade-in value, or miles driven) are calculated directly on your device and are never transmitted to, logged in, or stored in any Khulasa database.
  • Ask Khulasa Assistant Queries: If you voluntarily type and submit a question into the interactive "Ask Khulasa" assistant widget on our homepage, the text of that question is processed by our endpoint (/ai/ask) solely to generate an immediate mathematical answer and is not linked to a persistent user profile. Do not enter sensitive personal identifiers (such as Social Security Numbers, bank account numbers, or license plate numbers) into the assistant box.

2. Information You Voluntarily Provide to Us

We do not require user registration, accounts, or logins to use any calculator or read any article on Khulasa. The only personal information you may directly provide to us is through our Contact Form or via direct email to contact@khulasa.website or editorial@khulasa.website:

  • Contact Submissions: When you submit a message through our contact page, we collect your name, email address, message content, timestamp, and standard request metadata (IP address and user-agent string) strictly to respond to your inquiry and prevent automated spam abuse.

3. Information Collected Automatically (Server Logs & Analytics)

When your browser requests a page from khulasa.website, our web server and security infrastructure automatically record standard HTTP access log data necessary to deliver pages, prevent distributed denial-of-service (DDoS) attacks, and diagnose technical errors:

  • Internet Protocol (IP) address and approximate geographic region (country/state derived from IP routing);
  • Browser type, operating system, viewport class, and referring URL;
  • Pages requested, timestamps, and HTTP status codes.

If Google Analytics is active on the site, Google Analytics collects aggregated, pseudonymized traffic metrics (such as page views, session duration, and navigation paths) to help our editorial team understand which calculators and articles are most useful to readers. You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

4. Google AdSense, DoubleClick DART Cookies & Third-Party Advertising

Khulasa displays advertisements served by Google AdSense and Google-certified third-party advertising networks to fund our free calculators and independent editorial research. In compliance with Google Publisher Policies, please review how Google and its partners use cookies on this website:

  • Third-Party Vendor Cookies: Third-party vendors, including Google, use cookies, web beacons, and similar browser storage technologies to serve ads based on a user's prior visits to khulasa.website and/or other websites on the internet.
  • Google Advertising & DART Cookies: Google's use of advertising cookies (including the DoubleClick DART cookie) enables Google and its partners to serve personalized or non-personalized advertisements to our visitors based on their visit to khulasa.website and other sites across the web, as well as to cap ad frequency and measure ad effectiveness.
  • How to Opt Out of Personalized Advertising: You may opt out of personalized advertising served by Google at any time by visiting Google Ads Settings (adssettings.google.com). You may also opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Digital Advertising Alliance consumer choice portal at www.aboutads.info or the Network Advertising Initiative opt-out page at optout.networkadvertising.org.
  • How Google Uses Partner Data: To learn more about how Google collects and processes data when you visit websites that use Google advertising and measurement technologies, please review Google's official disclosure: How Google uses information from sites or apps that use our services and the Google Privacy Policy.

5. First-Party Cookies & Local Storage Used by Khulasa

In addition to third-party advertising and analytics cookies described above, Khulasa uses two strictly functional first-party storage items:

  • Session CSRF Token (PHPSESSID): A temporary session cookie used solely to generate a cryptographic Cross-Site Request Forgery (CSRF) token that protects our Contact Form from automated cross-site attacks.
  • Cookie Notice Preference (khulasa_cookie_notice_accepted): A single browser localStorage flag (`"1"`) saved on your device when you dismiss the cookie notice banner so the banner does not reappear on every page load.

You can clear or block cookies at any time through your browser's privacy settings. Blocking cookies will not disable any of Khulasa's 15 automotive calculators.

6. Data Sharing & Non-Sale of Personal Information

Khulasa does not sell, rent, or trade your personal contact information (such as your name or email address submitted via our contact form) to data brokers or third-party marketers. Information is shared only with:

  • Infrastructure, web-hosting, and security providers strictly necessary to serve and protect khulasa.website;
  • Advertising and analytics partners (such as Google AdSense and Google Analytics) via standard browser cookies as disclosed in Section 4;
  • Public authorities or law enforcement only when required by a valid subpoena, court order, or applicable statute.

7. Data Retention & Security

Contact form inquiries are retained only as long as necessary to resolve your question and maintain basic administrative correspondence logs, after which they are periodically purged. We enforce HTTPS/TLS encryption in transit, strict directory access controls (`.htaccess` rules blocking public access to configuration and storage directories), CSRF token validation, and HTTP security headers (X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, and Referrer-Policy: strict-origin-when-cross-origin).

8. Your Privacy Rights (CCPA/CPRA, Virginia VCDPA, Colorado CPA & GDPR/EEA)

Depending on your state or country of residence, you have specific statutory rights regarding your personal data:

  • United States Residents (California CCPA/CPRA, Virginia, Colorado, Connecticut, Texas, Oregon, etc.): You have the right to request disclosure of the categories of personal information collected, the right to request deletion of personal information you have submitted to us, the right to opt out of cross-context behavioral advertising (via the ad opt-out links in Section 4), and the right to non-discrimination for exercising your privacy rights.
  • European Economic Area (EEA), United Kingdom & Switzerland Visitors (GDPR): Where GDPR applies, we rely on your consent for non-essential advertising/analytics cookies, legitimate interests for site security and basic server delivery, and your request when responding to contact inquiries. You have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to withdraw consent at any time.

9. Children's Privacy (COPPA Compliance)

Khulasa is an automotive finance and vehicle-ownership publication directed at adult drivers and car buyers. We do not knowingly solicit or collect personal information from children under the age of 13 (or under 16 where applicable by jurisdiction). If you believe a minor has submitted personal information via our contact form, please contact us immediately at contact@khulasa.website and we will promptly delete it.

10. Contact Information for Privacy Inquiries

If you have any questions about this Privacy Policy, our data practices, or wish to submit a data access or deletion request, please contact our team: