Privacy
Financial planning means typing your salary, your savings and your debts into something. Most tools ask you to trust a promise about how they handle that. This one is built so the promise is mostly unnecessary — and the parts that still need trust are named below rather than glossed over.
The short version
- Your plan is computed in your browser. There is no server that does the math.
- Your plan is stored in your browser, in IndexedDB, on this device only.
- There are no accounts, no sign-up, no email required.
- There is no analytics, no tracking pixel, and no third-party script of any kind.
- This site sets no cookies.
- You can export everything as a JSON file, and delete everything from your browser settings.
Why a breach of our servers could not expose your plan
Not because we would protect it well. Because we do not have it.
This site is a set of static files — HTML, CSS and JavaScript. When you open it, your browser downloads those files and then runs everything locally. The tax engine, the projections, the mortgage math, the comparison between scenarios: all of it executes on your machine. Your salary is never transmitted anywhere, so there is no database of user finances to steal, subpoena, sell, or lose. There is no account to compromise and no password to reuse.
That is a structural property, not a policy. A policy can change with a funding round; this would require rebuilding the product.
What is stored, exactly
| What | Where | Why |
|---|---|---|
| Your scenarios | IndexedDB, this browser | So your plan is still there when you come back |
| The date you accepted the terms | localStorage, this browser | So the notice does not reappear every visit |
That is the complete list. Both live only in this browser on this device. They do not sync, they are not backed up by us, and we cannot read them. Clearing your browser's site data for this domain erases both permanently — which also means that is your delete button, and there is no “delete my account” request to file because there is no account.
If you use a private window, storage is discarded when you close it. The planner still works; it simply will not remember anything.
What we can honestly still see
Being precise matters more here than sounding absolute. Serving a website means a server receives a request for it.
- Our host sees page requests. This site is served by Cloudflare Pages. Like any web host, it receives the ordinary metadata of an HTTP request — your IP address, your browser's user-agent string, which page you asked for, and when. That is how the file reaches you at all. It reveals that someone visited; it does not reveal anything you typed, because nothing you type is ever part of a request.
- Network errors may be reported. Cloudflare sends a standard Network Error Logging header, which asks browsers to report connection failures. It is configured to report nothing on successful loads. It carries no page content.
We do not add anything on top of that: no logging of our own, no analytics account, no session recording, no A/B testing service, no advertising network.
Your data, in your hands
Export writes every scenario to a JSON file you keep. It is plain, readable text with a schema version — not a proprietary format designed to trap you. Import reads it back, on this device or another one. That file is how you move between machines, keep a backup, or take your work with you if you stop using this tool.
Because that file contains your finances, treat it like any financial document: it is as private as wherever you put it.
If that changes
Some features people ask for genuinely cannot work this way — syncing between your phone and laptop, or sharing a plan with an advisor, both require a server to hold something. We have not built those. If we ever do, it will be opt-in, it will be described here in this same plain language before it ships, and the local-only path will keep working for people who want it.
Connecting to your bank accounts automatically is not planned. It is the single largest thing we could do to make this product easier and the single largest thing we could do to make it more dangerous to you, and that trade is not currently worth making.
The rest of the honesty
Privacy is one kind of trust; being right is the other. Every rate, bracket and premium in this tool traces to a primary source — CRA, CMHC, OSFI or statute — and the projection tells you plainly where it is approximating rather than burying the caveat. See the planner's warnings, which are shown, never swallowed.
This page describes how the software works, and is not a contract. The information-not-advice terms are in the notice shown on your first visit, reopenable any time from the footer.