Privacy & Data Use

Calculator inputs and downloads

Calculations run in your browser. The calculator event tracking described below sends field names and export formats, not the financial amounts you enter. PDF and CSV exports are generated in your browser; keep downloaded files private when they contain personal information. Your country preference is saved on your device.

Account verification

When you request a sign-in code, we use your email address to deliver it through the configured email service. We store account details, hashed verification information, session records and sign-in audit events. Codes expire after 10 minutes; sign-in sessions last up to 12 hours. A temporary cookie ties a code request to your browser. Sign-in and verification limits help protect accounts.

Ordinary signed-in users can delete their account in Settings. Account deletion does not automatically remove separate anonymous analytics, server logs or copies already in backups. Administrator accounts require operator assistance.

Visitor analytics and cookies

First-party analytics records page views, approximate country, visible visit duration, changed calculator field names and PDF/CSV export clicks. A random visitor cookie lasts up to 180 days. A hashed identifier groups browser visits; it is not a count of identified people. Country lookup uses the connection IP locally; raw IP addresses and financial input values are not stored in the analytics tables.

Google Analytics can also load when configured and receive public page URLs and calculator event identifiers. Google may process connection, device and cookie information under its own policies. Do not include sensitive information in a page URL. Browser Do Not Track and Global Privacy Control signals disable the website's analytics event tracking. Blocking analytics or clearing visitor cookies changes measured counts.

Google privacy policy

Contact, external sites and advertising

The contact form opens a draft in your email application. Sending the draft shares its contents with the recipient and your email provider; the form does not submit a message to the site's database. Avoid account numbers, verification codes and private financial details in messages. Following external links or loading enabled third-party content may involve those providers' data practices. Google advertising is currently paused.

Server logs, retention and requests

The web server keeps access logs that can contain connection IP addresses, requested URLs, timestamps and request details. Analytics and account records are held in the website database, and operational backups may contain copies. Analytics, audit records and backups do not currently have a fixed automatic deletion schedule. Expired session and temporary verification records are periodically cleaned up.

For questions or a data request, use our contact page. Describe the request without including a password or sign-in code. We may need to confirm account ownership before handling account data.