Privacy Policy

1. Controller

The controller is a private individual, not a company. Email is the contact channel for every question and every request under this policy.

2. What is processed, and why

There is nothing else. No account can be created, no form posts anything to the server, and no personal data is bought, sold or received from third parties.

3. Hosting and server logs

This website is hosted by Hetzner Online GmbH in Germany. Its web server writes an access log, but your address is truncated before the entry is written (to its /24 prefix for IPv4, or its /48 prefix for IPv6), so nothing stored identifies you on its own. Your full address exists only momentarily in the server's memory, where it is used to enforce a rate limit, and is never written to disk. The entry names the page that was requested but never the part of the address after "?", where share links carry calculator inputs, and it records neither your browser's user agent nor the page you came from. A separate log records critical server faults only; entries there are rare and are not produced by ordinary browsing. Encryption is handled by a reverse proxy the operator runs on the same server; it keeps no access log of its own.

The purpose is to deliver the site and keep it secure and stable, which is an overriding private interest under Art. 31(1) FADP. Log volume is capped, so older entries are discarded automatically.

Hetzner acts only as a processor on the operator's instructions, under a data-processing agreement as required by Art. 9 FADP and Art. 28 GDPR. It does not use this data for its own purposes.

Because the servers are in Germany, this processing takes place abroad (Art. 19(4) FADP). Germany appears on the Federal Council's list of states with an adequate level of data protection, so the transfer requires neither the additional safeguards of Art. 16(2) FADP nor an exception under Art. 17 FADP.

4. Storage in your browser

The site stores two families of values in your browser's localStorage. Under settings.… it keeps your display and model preferences: currency, currency symbol, expected market return, volatility, whether inputs are remembered, whether the sensitivity line is shown. Under calc.… it keeps a snapshot of the values you typed into each calculator so they are still there when you come back, but only once you turn on "Remember my inputs", which is off until you do: in Settings, or by choosing "Remember and leave" when you leave a calculator with unsaved values. With that setting on, the age, net wealth and annual income you enter on the start page are also kept in your browser's sessionStorage under landing.profile, which the browser discards when you close the tab.

None of this is ever transmitted to or read by the server, and none of it is a cookie. Turning "Remember my inputs" off again stops new snapshots and erases the start-page values; "Clear stored inputs" next to it erases the calculator snapshots, and clearing your browser data for this site erases everything. You can also configure your browser to block site storage entirely; the site then simply starts from its defaults each time. Share links are the one case where your inputs travel: they are encoded into a URL that you choose to share. Nothing about them is stored here: when a share link is opened, the server's access log records only the page's path, never the numbers in it.

5. No cookies, no tracking

This website sets no cookies, uses no analytics, and embeds no third-party trackers or ad networks. Fonts are served from this site, not from a font provider, and no page loads code, images or styles from any other origin. There is no profiling and no automated decision-making. The site is not directed at children and does not knowingly collect their data.

6. Security

The site is static: no user accounts, no database, no file uploads, nothing to log into. Every page is served exclusively over encrypted HTTPS (TLS), and HSTS tells browsers never to fall back to plain HTTP. A strict content security policy forbids code and content from any other origin, the server advertises no version information, and requests are rate-limited per client. These are the technical and organisational measures required by Art. 8 FADP.

7. Your rights under Swiss law

You may request access to the personal data processed about you (Art. 25 FADP); a reply is owed within 30 days. You may request rectification of inaccurate data (Art. 32(1) FADP), and, where processing is automated and based on your consent or on a contract, the handover of your data in a common electronic format (Art. 28 FADP).

Swiss law does not grant a standalone right to erasure or restriction in the way the GDPR does: you may demand that processing stop, that data be destroyed, or that a disclosure be barred, and you may enforce that as a civil-law claim under Art. 32(2) FADP together with Art. 28 ff. of the Civil Code.

You may also report a matter to the Swiss Federal Data Protection and Information Commissioner (FDPIC), who decides whether to open an investigation (Art. 49 FADP).

If a data security breach occurs that is likely to lead to a high risk to your personality or fundamental rights, the FDPIC is notified as soon as possible, and you are informed where the law requires it (Art. 24 FADP).

8. If you are in the EEA

This site is reachable from the European Economic Area, so the GDPR applies alongside the FADP for visitors there. The only processing that happens on the server is the access log described in section 3; its legal basis is Art. 6(1)(f) GDPR, the legitimate interest in operating the site securely and reliably. Nothing on this site asks for consent, and no processing here relies on it.

You have the rights set out in Art. 15–22 GDPR: access, rectification, erasure, restriction, portability and objection. Requests are answered within one month (Art. 12(3) GDPR). You may also lodge a complaint with your national supervisory authority (Art. 77 GDPR).

The controller is established in Switzerland, which the European Commission recognises as providing an adequate level of data protection, so data reaching Switzerland needs no further safeguard. A reportable personal data breach is notified to the competent supervisory authority within 72 hours (Art. 33 GDPR).

9. Changes to this policy

This policy is updated when the site or the law changes. The version below is the one that applies; superseded versions are kept in the project's records, so what the policy said on any given date can be established.

Version 4, effective 11 October 2026.