Privacy Policy

Last updated: 2026-06-08 · Effective date: 2024-01-01

 Plain English summary: We never sell your personal data. Your calculator inputs stay in your browser — we don't receive them. The only personal data we hold is what you choose to give us: your email address if you request a free checklist or contact us. We may use privacy-friendly, anonymized analytics to improve the site, and you have full rights over any data we hold.

1. Data Controller

DecisionsCalc ("we", "us", "our") operates the website at decisionscalc.com. For privacy-related questions or data subject requests, contact us at privacy@decisionscalc.com or via our contact form. We aim to respond within 30 days of receiving a verifiable request.

2. Data We Collect

Calculator inputs: All numbers you enter into our calculators are processed entirely within your browser. We do not receive, transmit, or store any financial figures you input.

Automatically collected data: When you visit our site, we may automatically collect:

IP address (anonymized to /24 subnet before any storage)
Browser type and version
Operating system
Pages visited and time on page
Referral URL

Data you voluntarily provide: If you contact us by email, we collect only what you share in that message. If you submit your email address to download a free checklist or receive updates, we collect your email address (and the name of the tool you requested it from). We never require an account to use any calculator.

How your email is processed: Submitted emails are stored securely on our hosting provider's infrastructure (Cloudflare R2) and may be processed by a reputable third-party email service provider (such as MailerLite or Brevo) solely to deliver the checklist you requested and any updates you opted into. We do not sell or rent your email address. You can unsubscribe at any time, and you can ask us to delete it (see "Your Rights" below).

3. Cookies & Tracking Technologies

We use the following categories of cookies:

Strictly necessary cookies: Required for the site to function (e.g., cookie consent preference). These cannot be disabled.
Analytics cookies (optional): If you accept, we may use privacy-first analytics (e.g., anonymized page-view data) to understand how the site is used. We do not use Google Analytics or similar identity-linked trackers without your consent.
Advertising cookies (optional): We plan to apply for Google AdSense. If approved, ad-serving cookies will only be set after you accept them via our cookie banner.

You can change your cookie preferences at any time by clearing your browser's local storage or revisiting our Cookie Policy page.

4. How We Use Data

To serve and improve the website
To understand aggregate usage patterns (no individual profiling)
To respond to support requests
To comply with legal obligations

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

We do not sell, rent, or trade your personal data. We share data only with the service providers needed to operate the site, and only for the purposes described here:

Hosting & storage (Cloudflare Pages, R2) — site infrastructure and secure storage of any email you submit. Cloudflare is GDPR-compliant.
Email service provider (such as MailerLite or Brevo) — to deliver the checklist you requested and any updates you opted into. Used only if you submit your email.
Analytics providers — only privacy-friendly, anonymized, aggregated usage data, and only if you consent.
Advertising partners — if advertising is enabled and you consent; governed by their own policies. Affiliate links are simply outbound links and do not share your personal data with us.
Law enforcement — only if required by a valid legal process.

6. Data Retention

We retain server access logs for a maximum of 30 days, after which they are permanently deleted. Email correspondence is retained for up to 2 years. Cookie consent preferences are stored in your browser's local storage and persist until you clear them.

7. Your Rights (GDPR — EU/UK Residents)

If you are in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

Right of access — request a copy of data we hold about you
Right to rectification — correct inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing based on legitimate interests
Rights related to automated decision-making

To exercise any of these rights, email Contact us via our contact form. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Our legal basis for processing is: legitimate interests (site analytics, security) and consent (optional analytics/advertising cookies).

8. California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know — what personal information we collect and how it is used
Right to Delete — request deletion of personal information we hold
Right to Opt-Out of Sale or Sharing — we do not sell personal information. Click "Do Not Sell or Share My Personal Information" if you wish to formally exercise this right (as required by law, even though we do not sell data).
Right to Non-Discrimination — exercising privacy rights will not affect your access to the site
Right to Correct — correct inaccurate personal information

To exercise California rights, contact Contact us via our contact form with "CCPA Request" in the subject line.

9. Children's Privacy

DecisionsCalc is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

10. International Data Transfers

Our infrastructure is provided by Cloudflare, Inc. (US). Data may be processed in the United States. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission for cross-border data transfers.

11. Security

We implement appropriate technical and organizational measures to protect data, including HTTPS encryption, Content Security Policy headers, and regular security reviews. However, no internet transmission is 100% secure.

12. Changes to This Policy

We may update this policy. The "Last updated" date at the top will reflect changes. Continued use of the site after an update constitutes acceptance of the revised policy.

13. Contact Us

For any privacy-related questions or requests:
Email: Contact us via our contact form
Response time: Within 30 days