Privacy policy

This site is run from Spain and is subject to the GDPR (Regulation (EU) 2016/679) and to Spanish Organic Law 3/2018 (LOPDGDD).

The short version: this site sells nothing, sets no advertising or tracking cookies, and does not build a profile of you. What you type into a calculator is used to answer your question and is never kept in a way that could be linked to you. The things it does keep are the ones you choose to give it: a comment you write, the sign-in that puts your name on it, your email address if you ask for the mailing list, and, if you make an account, whatever you have chosen to save in it.

1. Who is responsible

Pekka Gaiser, Diseminado B-2, 35542 Tabayesco, Haría (Las Palmas), Spain

NIE: Y34888723M · Email: pekka@pekka.net

There is no obligation to appoint a Data Protection Officer under Art. 37 GDPR, and none has been appointed. Write to the address above with anything about your data.

2. What the calculators do with your figures

The calculators run on the server, not in your browser. When you enter an income, an expense figure, a year, or the cuotas you have paid, those numbers are sent to the server, the result is calculated, and the answer is sent back to your browser.

The figures you type into a calculator are not stored on our servers in a way that could be used to identify you, and they are not used to build a profile.

What is kept for statistics is one line per press of Calculate saying what kind of question was asked: the tool, the year, the language, whether the visitor was a guest, a free account or a member, the comunidad autónoma, the discount and situation chosen, and the income as a band (under the minimum wage, up to 20,000, up to 30,000 and so on), never the figure. The line holds nothing that links it to you: no account, no session, no IP address, no browser, and the time is rounded to the hour. It tells me which tools are used and for what kind of income, so that I know what to improve.

What is held for the length of your visit, for your convenience: your tax profile (region, children, age and the like) and your expense lists and catalogues. They sit, encrypted, in the session described in section 5, so that you do not have to retype them when you move from one tool to the next. They are deleted when the session expires two hours after your last visit.

Two things you can ask for are the exception, and both are opt-in. If you turn on Save data on device the figures are kept in your own browser (section 3); if you have an account, your tax profile, your expense lists and any calculation you pressed Save on are kept on the server, under that account, until you delete them (section 10). Without either, the two paragraphs above are the whole truth.

You are not asked for your name, your NIE, or any other identifying detail, and you should not type any into a calculator: nothing on this site needs them.

• Purpose: answering the question you asked the calculator
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in providing the tool you came to use
• Retention: none for a calculator's figures; two hours for the shared answers; the statistics line is kept indefinitely, since it is not about anyone

3. "Save data on device"

Storing anything on your device is off by default. The first time a calculator gives you a result, a dialogue asks whether we may keep what you typed in your browser, so that you do not have to type it again on your next visit. Yes or no, the answer is remembered and you are not asked again.

It is one switch for the whole site, not one per calculator: a single decision about whether this device holds any of your figures at all. The footer of every page carries it, marked Save data on device, and it is where you turn it on later or off again. Clicking it never acts on its own; it opens a dialogue that says what is about to happen, and only the button in there does anything.

What that means in practice:

• The values are stored in your own browser, using localStorage, one key per tool.
• One more localStorage key, at:popups, is outside this switch: it holds the names of the notices the site has already shown you once (the welcome dialogue, for one), so you are not shown them again, and nothing else.
• They stay on your device. They are not a cookie, and they are not sent to the server with every request. I cannot read them there.
• The stored values are sent back to the server only when you return to that page with storage on, so the calculator can be filled in again, and even then they are handled exactly as in section 2.
• Turning the switch off deletes everything this site has stored, from every calculator, immediately, not only the one you are looking at. Clearing your browser's site data does the same. Using a different browser, a different device, or a private window means there is nothing stored to find.
• If you are signed in, the account is a second and separate copy, kept on the server so that it follows you between devices, and this switch does not govern it. Signing in folds what is on the device into the account. What the account holds and how to delete it is section 10.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by answering yes to that dialogue or by turning the switch on in the footer, and withdrawn by turning it off there. Storage of this kind requires consent under Art. 22 LSSI, which is why nothing is stored until you have said so, and answering no stores nothing but the no itself.
• Retention: until you turn the switch off or clear your browser data.

4. Links that carry your settings

Some pages link to another tool with the settings you were using already filled in, and those settings appear in the address bar (for example ?year=2025&discount=tarifa_plana). This is only so the next tool opens ready to use.

Be aware that if you copy such a link and send it to somebody, whatever it carries goes with it. If you have typed an income into a tool, check the address bar before sharing the link.

5. Cookies

This site sets no advertising, marketing, or cross-site tracking cookies, and there is no cookie banner because there is nothing to ask you about.

Six strictly necessary technical cookies are used:

Cookie	What it is for	Lifetime
autonomotools_session	Keeps your visit together across page loads, so the calculators work at all.	2 hours
XSRF-TOKEN	Protects the forms against cross-site request forgery.	2 hours
locale	Remembers which language you are reading the site in, so that coming back to the address on its own opens it in that language instead of guessing again. It holds two letters (en, es or de) and nothing else.	1 year
disclaimer_agreed	Set only if you tick "Do not show again" in a calculator's disclaimer. It remembers that you have read it, so the calculators stop asking you to open it before every calculation. It holds a single 1.	1 year
dismissed_notes	Set only if you tick "Do not show again" on one of the short notes a calculator shows beside a question. It holds the names of the notes you have sent away, so they are not shown to you again, and nothing else.	1 year
last_sign_in	Set when you sign in. It remembers which button you used (google, email and the like), so the next time the sign-in dialogue opens it can mark that one as the one you used last. It holds that one word and nothing else.	1 year

All six are necessary for the site to work as described and are exempt from the consent requirement under Art. 22.2 LSSI: the first two technically, the last four as interface preferences. None of them identifies you, and none is read by anyone else.

6. Visitor statistics

Visits are counted with Umami, an open-source analytics tool running on my own server in Germany (STRATO AG, at stats.autonomotools.com). The figures never reach a third-party analytics company, because there is no third-party analytics company involved.

Umami sets no cookies, collects no personally identifiable data, does not follow you to other websites, and needs no consent under the GDPR. What it records is:

• page views and a count of unique visitors, without identifying them
• where a visit came from (the referrer)
• how long a visit lasted
• the country, without any more precise location
• rough device and browser information
• a few counted moments, so I can see whether a tool is actually usable: a tool being opened from the menu or from the front page, a calculator being filled in, Calculate being pressed, the Social Security or pension section being opened, the working being shown, the tax settings being opened, the sign-up, share or feedback dialogue being opened, something being shared or sent, a comment being posted, the language menu being opened, and the "save on this device" switch being confirmed. Each is a bare count of the action and the page it happened on, with nothing attached that says who did it, and never the figures you typed or the words you wrote

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in knowing which tools are used and which pages fail people. More about the software: umami.is

7. Server logs

The web server keeps the usual access log: IP address, time, the page requested, the browser's user agent, and the referring page. This is what makes it possible to find a fault or to notice an attack.

• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in a working and secure site
• Retention: 3 months, then deleted

Error reports

When something on this site breaks, the fault is reported to Sentry, an error-monitoring service, so that I find out about it instead of waiting for somebody to tell me. A report is the technical account of a fault: which page, what the error said, and the line of code that failed.

It is configured to carry as little of you as it can. It does not include your IP address, your cookies, or which account you are signed in as, and it does not include the figures you typed. The request that caused the fault is deliberately left out of the report, which is what keeps the promise in section 2 true even when something goes wrong.

One honest exception: an error message written by another system can occasionally contain an email address, typically when a mail server refuses a sign-in code and names the address it refused. That is the one route by which something identifying could reach a report.

• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in a working site
• Retention: 90 days, then deleted
• Where: Sentry's European region, on servers in Frankfurt, Germany

8. If you write to me

If you send an email, I have your address and whatever you put in the message, and I use them to answer you.

• Legal basis: your consent and legitimate interest (Art. 6(1)(a) and (f) GDPR)
• Retention: correspondence that leads nowhere is deleted after a year

9. Comments

You can leave a comment under any tool. To do so you sign in with one of the providers (Google, Microsoft, LinkedIn, GitHub, Facebook) or with nothing but an email address. There is no password anywhere on this site: those are the only two ways in. What else an account holds is section 10; commenting needs none of it.

What is stored when you sign in: your name and email address as the provider gives them to me, the provider's id for you, your profile picture, and which language you were reading in. What is stored when you comment: what you wrote, when, which page it was on, and which of those accounts wrote it.

Your name and your profile picture are published beside your comment. Your email address is not, and neither is anything else the provider sent.

The picture is copied onto this server, not linked to. It is fetched once, at the moment you sign in and have already chosen to deal with the provider, then shrunk to a 96 pixel square and served from here like every other image on the site. A comment thread therefore loads nothing from the provider, and reading one tells it nothing about you, whether you have signed in or not. If the provider gives no picture, your initials are drawn instead and nothing is fetched at all.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by signing in and by posting
• Retention: a published comment stays until you or I remove it. Ask me to delete your account and the comments go with it
• Moderation: comments appear immediately. I read them afterwards and can hide or delete anything abusive, off-topic or dangerously wrong, without notice and without owing an explanation

Replies, mentions, and the emails they cause

You can reply to a comment, and you can put someone's name in yours by writing @ in front of it. You can only name someone who has already commented in the same thread. There is no directory of people who use this site and no way to search one, so nobody can be named, or emailed, out of the blue.

When someone replies to your comment or names you in one, you get an email. It tells you who did it and on which page, and it links to the page. It does not quote what they wrote. An email is a copy that outlives the page: quoting would put somebody else's words permanently in your mailbox, where nothing that happens to that comment afterwards, including its author deleting it, could reach them.

• Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You wrote something in public and somebody responded to it; being told is what you would expect. These are service messages about your own comments and nothing else is ever sent to that address: no announcements, no newsletter, no marketing
• Your control: the first time you comment there is a tick box for it, and every one of these emails has a link that stops them. It needs no password. The same link turns them back on if you change your mind
• What stopping them does not do: your comments stay where they are. You simply stop hearing about replies to them

At most five people can be named in one comment, so a single comment cannot be used to mail a crowd.

Please do not put anything in a comment you would not want read by strangers, and in particular do not put your NIE, your figures, or anything else about your own tax affairs in one. A comment is a public page on the internet.

To have a comment removed, or your account and everything attached to it deleted, write to pekka@pekka.net.

The feedback box

Every tool has a "give feedback" button. What you write there is private: it is emailed to me and stored, and it is never published anywhere on this site. No sign-in is needed, and the name and contact fields are both optional.

Along with what you write, I keep the page you were on (which usually explains the complaint), the language you were reading in, and, if you happened to be signed in, which account you were.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by pressing send
• Retention: kept while it is still useful for fixing what it describes, and deleted within two years
• If you leave no contact: there is nothing to identify you by and nothing I could answer

10. Your account

Signing in gives you an account whether you wanted one or not, because there is nowhere else to put your name. An account is free and holds nothing until you put something in it. What it can hold, all of it optional and all of it yours to see and delete in My area:

• Your name, your email address, your profile picture and the language you read in. These come from whichever way in you used: a provider gives me all four, the email code gives me the address alone and the name is asked for later, on your first comment.
• Your tax situation, if you filled it in: comunidad autónoma, children, filing status, disability, dependants, the year you registered as autónomo, and the other answers the calculators use. It exists so that you type it once instead of once per tool. Nothing in it is verified, nothing in it is shared, and leaving it empty only means the calculators assume less about you.
• Your expense lists and the things you sell, if you made any: the names and figures you typed, nothing more.
• Calculations you chose to save, under the names you gave them, with the figures you put in and the answer that came out.
• Whether you want the emails about replies to your comments, and the record of the comment rules you agreed to.
• When you last signed in or used the site, to the hour, so that I can tell a live account from an abandoned one.
• Which tagged link brought you, if one did: the four campaign words described under section 12, written once when the account is made and never again. They say an account came from, say, a post on Reddit rather than from a search, and nothing else.

Some of it is health data, and that deserves saying plainly. The tax profile asks whether you have a recognised disability, and at what degree, because Spanish income tax gives an allowance for it and a calculator that ignored the question would give the wrong number to the people it matters most to. That is a special category under Art. 9 GDPR. It is stored only if you answer, it is used only to compute your own figures, it is never published, never shared and never used to decide anything about you, and clearing the field removes it.

• Legal basis: your consent (Art. 6(1)(a) GDPR) for everything in the account, and explicit consent (Art. 9(2)(a) GDPR) for the disability answers, given by typing them in knowing what they are for
• Retention: for as long as the account exists. Delete the account and all of it goes with it, comments included
• Your copy: one button in My area downloads the whole of it as a file, and another deletes the account outright. Neither asks me first

Your email address is the credential. There is no password, so the address is how you get back in. You can change it in My area, and because it is the credential and not an ordinary field, changing it takes two steps and both addresses are told. A six-digit code goes to the new address, to prove you can read it. At the same moment a message goes to the address you are leaving, naming the new one and carrying a link that stops the change; that link needs no sign-in, so it works even if somebody else is sitting at your screen. Nothing moves until the code is typed in, and a request that is never finished lapses within the hour.

Two things do not simply follow the address. The mailing list stays where it is unless you tick the box asking for it to move, because it is a separate consent given at a separate moment, by an address rather than by an account. Your billing email at Paddle moves with your account, so receipts and renewal notices follow you; if Paddle refuses the change the page says so rather than letting the two quietly disagree. If you have lost access to both addresses, write to pekka@pekka.net.

11. Membership and payment

Most of this site is free to use up to the minimum wage. Above that, a membership shows you your own figures instead of an example. Paying for one is the only part of this site that involves money, and none of it happens here.

Paddle is the seller, not a payment box on my page. Paddle.com Market Limited is the merchant of record: the sale is a contract between you and Paddle, and Paddle is responsible for taking the payment, charging the right tax for wherever you are, issuing the invoice and handling refunds. The form you fill in is Paddle's own, inside a frame on my page, and your card number, your billing address and your tax identifier go to Paddle and never to me. I could not store them if I wanted to.

What comes back to me, and is stored here:

• your email address, as Paddle recorded it, which is what the account is made from
• Paddle's own identifiers for you and for the subscription
• whether the subscription is running, paused or cancelled, and when it next renews
• the date, amount, currency and invoice number of each payment, so that My area can list them and link to Paddle's own invoice

Paying is what creates the account, if you did not have one: nobody is asked to sign in before buying. Paddle tells my server the payment succeeded, the server makes the account from the address Paddle collected, and the browser that paid is let in. You are then offered the ways of getting back in next time.

For a few months I also keep the messages Paddle sends my server, whole, as they arrive. They are the only record of what actually happened to a payment, and the day somebody writes to say they were charged twice, they are the only useful answer. They contain what is listed above and no card details.

• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) for everything needed to give you what you paid for, and legal obligation (Art. 6(1)(c)) for what has to be kept for accounting
• Retention: the subscription and payment records for as long as the law requires them to be kept, which is longer than the account itself. Deleting your account does not delete an invoice, and nothing can: the law says otherwise
• Cancelling: from My area, which sends you to Paddle's own page for it. Cancelling ends the membership; deleting the account is a separate act and does neither on its own

12. The mailing list

You can give me your email address to hear about Autónomotools: new tools, changes to the ones that exist, guides, offers, and other news about the site and about being autónomo in Spain. It is entirely optional, it is nothing to do with having an account, and the site works exactly the same whether you do or not.

Double opt-in, which is why there are two steps

Typing your address into the form does not put you on the list. It sends one email to that address with a button in it, and nothing else is ever sent until you press that button. If somebody enters your address by mistake or on purpose, you get one email you can ignore, and ignoring it is the end of it.

What is stored, and why more than the address

The address, the language you were reading in, and, if you chose to give them, your comunidad autónoma, your industry, and roughly how long you have been autónomo. All three are optional, none of them is used to build a profile of you, and the last is a bracket ("2+ years") rather than a date. They decide one thing only: whether a given announcement is worth sending you at all. A tool about a Canarian tax is not worth an email to somebody in Madrid, and the alternative to asking is sending everything to everybody.

Alongside those, I keep the record of the consent itself, because the law requires me to be able to demonstrate it (Art. 7(1) GDPR) and a tick box on its own demonstrates nothing:

• the exact wording you agreed to, copied at the moment you agreed to it, so that later edits to the form cannot change what you are recorded as having consented to
• the IP address and the time the form was submitted, and the IP address and the time the confirmation link was pressed
• the browser string sent with the request, the page you were on, and which button opened the dialogue
• whether you happened to be signed in, and if so which account

Those two IP addresses are the evidence that a real person at a real moment asked for this. They are not used for anything else, and they are not looked up, shared or matched against anything.

• Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box and proven by pressing the link in the email
• Retention: for as long as you are on the list, and after that the record of the consent and of its withdrawal is kept as evidence that both happened. Ask me and it goes altogether

Where you came from

If you reached the site from a link somebody had tagged (one of my own emails, a post, an advertisement), the tag is part of the address you followed: utm_source, utm_medium, utm_campaign and utm_content. Those four words are held on my server for the length of your visit, and if you join the mailing list or make an account during that visit they are stored with the sign-up. That is all they do. They tell me a subscription or an account came from, say, Reddit rather than from a search, which is how I decide where it is worth writing next.

Nothing is stored on your device for this and no cookie is set for it. The tags sit in the ordinary session described in section 5, they are gone when it expires two hours later, and they are never used to recognise you on a later visit or to follow you anywhere else. Arrive from an untagged link, or type the address in yourself, and there is nothing to record.

The rest of the address you were on is not kept: the page is stored without its query string, so the figures you may have typed into a calculator are not part of the record.

Getting off it

Every email on this list has an unsubscribe link at the bottom of it, and carries my name and postal address so you can see who sent it without opening anything. Mail apps that show their own "unsubscribe" button are given a one-press address of their own, so that button works too.

The link needs no password and no account, it works for years rather than days, and the same link puts you back on if you change your mind. Withdrawing consent is as easy as giving it (Art. 7(3) GDPR), and it does not affect anything sent before you withdrew it.

Unsubscribing switches the messages off and keeps the record that you were once on the list and then left. To have the address deleted outright instead, write to pekka@pekka.net.

It is a separate list from the comment emails

The mailing list and the reply-and-mention emails in section 9 are two different things and two different switches. Leaving one does not leave the other. Signing in to comment does not put you on the mailing list, and joining the mailing list does not sign you up for anything about comments. The addresses given for comments are never written to with announcements or marketing; that promise is what the legitimate-interest basis in section 9 depends on.

13. Who else sees any of this

No data from this site is sold, rented, or shared for anyone else's purposes. The only third parties involved are the companies whose machines it runs on, acting as data processors under Art. 28 GDPR:

• ALL-INKL.COM – Neue Medien Münnich, Germany — web hosting
• Hetzner Online GmbH, Germany — server hosting
• STRATO AG, Berlin, Germany — hosts the self-hosted analytics server
• Functional Software, Inc. (Sentry), San Francisco, United States — error monitoring, with the reports themselves held in Frankfurt, Germany (section 7)

Then the sign-in providers, and only the one you choose to use. Nothing reaches any of them until you press their button. When you do, you leave this site for theirs, and what happens there is governed by their privacy policy, not by this one. Each tells me the same handful of things — your name, your email address, an id, and usually a link to your profile picture — and I tell each of them nothing about you:

• Google Ireland Limited, Dublin, Ireland — Google's privacy policy
• Microsoft Ireland Operations Limited, Dublin, Ireland — Microsoft's privacy statement
• LinkedIn Ireland Unlimited Company, Dublin, Ireland — LinkedIn's privacy policy
• GitHub, Inc., San Francisco, United States — GitHub's privacy statement
• Meta Platforms Ireland Limited, Dublin, Ireland — Meta's privacy policy

You can also sign in with nothing but an email address: I send you six digits, you type them back, and you are signed in. No third party is involved beyond the mail provider that carries the message, the same one that carries every other email from this site. The code works once, expires after ten minutes, and stops working after five wrong guesses. What is stored is the address, the language you were reading in, the page to come back to, and a one-way fingerprint of the code — never the code itself — so that a copy of the database is not a set of working keys. The row is spent the moment it is used.

Then Paddle, if you buy a membership, and only then. Paddle is the seller of record, not merely a payment processor: the contract of sale is between you and Paddle, and it is Paddle that takes your payment details, works out the tax and issues the invoice. No card number, no billing address and no tax identifier ever reaches this site; the payment form inside the sign-up dialogue is Paddle's own frame, and what comes back to me is your email address, whether the subscription is running, and the date, amount and invoice number of each payment.

• Paddle.com Market Limited, Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom — Paddle's privacy policy

Data may also be disclosed to a public authority where the law requires it.

14. International transfers

The machines this site runs on are all in Germany, inside the European Economic Area.

The one exception is the sign-in. If you sign in to leave a comment with one of the providers above, you deal with that company, whose processing may involve servers outside the EEA under its own transfer safeguards. GitHub is a United States company and its transfers rest on the EU-US Data Privacy Framework; the others are the European arms of their groups. That is a choice you make by pressing the button, and it is the only part of this site that sends anything about you to a company outside Europe. Signing in with an email address instead involves no such transfer.

Paddle is in the United Kingdom, which is outside the EEA, and it is there that a membership payment is handled. Transfers to the United Kingdom rest on the European Commission's adequacy decision for it, which is what makes them lawful without further safeguards. If you never buy anything, nothing about you reaches Paddle at all.

The error monitoring is the other company outside Europe, though the data is not. Sentry is run by Functional Software, Inc., a United States company, and section 7 says what a report does and does not contain. The reports are held in its European region on servers in Frankfurt, so they stay in Germany like everything else here. What crosses the Atlantic is the possibility of access from the United States, and that rests on the EU-US Data Privacy Framework and on the European Commission's Standard Contractual Clauses.

Otherwise these pages load nothing from anywhere else: no external fonts, no CDN, no embedded videos, no social media widgets. Every script, font and image comes from this site's own server, so opening a page does not announce your visit to anyone. Each sign-in button is an ordinary link, not an embedded script from that company: it sends nothing until you click it.

15. Your rights

You may ask for access to your data, its rectification or erasure, the restriction of its processing, its portability, and you may object to processing based on legitimate interest or withdraw consent at any time. Spanish law adds the right not to be subject to automated decisions and the rights of heirs to a deceased person's data.

Two practical notes, because they save everybody time:

• Anything you saved with the browser switch is yours to delete, right now, by turning the switch off.
• The figures you type into a calculator are not linked to you unless you have an account and chose to save them. Without one there is nothing that can be found as yours to give you access to or to delete; with one, everything saved is listed in My Area.
• You do not have to ask me for the first two rights. My Area has a button that downloads everything this site holds about you as a single file, which is access and portability done on the spot, and another that deletes your account and everything attached to it, comments included. Neither needs my involvement and neither takes a month.

To exercise a right, write to pekka@pekka.net, say which right you mean, and expect an answer within one month. I may need to establish that you are who you say you are before handing over data.

Erasure has a page of its own: deleting your data sets out what you can remove yourself without asking anybody, and what to write if you want the rest gone.

If you are not satisfied, you can complain to the Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid — aepd.es, electronic office sedeagpd.gob.es.

16. Security

The site is served over HTTPS, kept up to date, and backed up. Access to the server is restricted and protected by two-factor authentication where the provider supports it.

Two things are worth saying about accounts in particular. There are no passwords to steal, because there are none to set: every way in is either a provider you already trust or a six-digit code that lives for ten minutes in one mailbox. And there are no payment details to steal, because none of them are here: the card is handed to Paddle inside its own frame and this site never sees it (section 11).

What an account does hold is what you chose to put in it: your tax profile, your expense lists, your saved calculations. It is worth less to a stranger than it is to you, but it is yours, and the delete button in section 10 works without asking anybody.

17. Automated decisions

The calculators compute a figure from the numbers you give them and show it to you. That is arithmetic, not a decision about you: nothing is decided, scored, ranked, or profiled, and no result affects you in any legal or similarly significant way.

18. Minors

This site is aimed at self-employed adults. It is not directed at children, and it collects nothing that would identify one.

19. "Do Not Track"

Browser "Do Not Track" signals are not acted on, because no uniform standard for them exists. It makes no practical difference here: nothing on this site tracks you across websites in the first place.

20. Changes to this policy

This policy will change when the site does, and the date at the top will say when. Accounts, saved calculations and payments arrived in September 2026 and are described in sections 10 and 11; anything else that stores something will be described here before it is switched on rather than afterwards.