Privacy policy

Nothing you type into the calculator is collected, stored or transmitted. What analytics does and does not see.

Last updated: August 2026

The short version. Nothing you type into the calculator is ever collected, stored or transmitted. Your age, balances, income and Social Security figures stay in your browser and are gone when you close the tab. There are no accounts, and nothing you enter is saved anywhere, by me or by anyone else.

This site does use Google Analytics to count visits and see which pages people find useful. That measures traffic — pages viewed, where visitors arrived from, roughly where in the world they are. It does not and cannot see the numbers you enter. The two are separate, and the sections below say exactly which is which.

What the calculator does with your information

Nothing leaves your device.

When you enter your age, account balances, income or Social Security figures, those values are held in your browser's memory while the page is open. The calculation runs on your own machine. The numbers are never sent anywhere, never written to disk, and never seen by me or by anyone else.

Close the tab and they are gone. Reload the page and you start fresh. There is no "save" because there is nowhere to save to.

What the browser enforces

The site is served with a Content Security Policy — a rule set the browser itself applies, listing the only places this page is permitted to talk to. That list is Google's analytics domains, and nothing else. Every other destination on the internet is blocked by the browser, not merely unused.

What that means in practice: the calculator has no code that reads your figures and sends them anywhere, and the browser would refuse the request even if it did. What is permitted reports which page you are on, not what is on it.

You can check this yourself. Open your browser's developer tools, go to the Network tab, and use the calculator. You will see the page load and requests to Google Analytics. You will not see your figures in any of them.

Cookies and local storage

Google Analytics sets cookies in your browser — typically named _ga and _ga_<id> — which let it tell a returning visitor from a new one. They hold a randomly generated identifier. They do not hold your name, your email address, or anything you typed into the calculator.

You can block or delete them in your browser settings, or use Google's opt-out browser add-on. The calculator works exactly the same either way — it does not read them.

The calculator itself stores nothing. It does not use localStorage, sessionStorage or any other storage for your figures. That is why there is no "save" button: there is nowhere to save to. Reload the page and you start fresh.

Analytics

This site uses Google Analytics 4 to understand how many people visit and which pages are useful. I use it to decide what to improve — nothing else.

What it collects:

  • Which pages you view, and for how long
  • How you arrived — a search engine, a link, or directly
  • Approximate location, at city level, derived from your IP address
  • Device, browser and screen size
  • A randomly generated identifier stored in a cookie, so returning visits can be recognised
What it does not collect, and cannot. None of the information you enter into the calculator is sent to Google Analytics or anywhere else. Not your age, not your account balances, not your income, not your Social Security figures, not your filing status. No event on this site reads a form field. Those numbers exist only in your browser's memory while the page is open, and are discarded when you close the tab.

Google processes this data as described in its privacy policy, and how Google Analytics uses data covers what Analytics specifically does with it. IP addresses are anonymised by Google Analytics 4 before storage.

To opt out entirely, install Google's opt-out browser add-on, or block analytics in your browser or an extension. The calculator is unaffected.

Hosting

The site is hosted on Amazon Web Services, served through Amazon CloudFront. Delivering a web page inherently requires the hosting infrastructure to receive your IP address — that is how the internet works, and no website can avoid it.

CloudFront access logging is disabled on this distribution, so those requests are not recorded or retained by me. AWS may process request data transiently as part of operating their network, under their own privacy notice.

Email

If you email me through the address on the contact page, I will have your email address and whatever you write. I use it to reply and for nothing else. You will not be added to a mailing list, because I do not run one.

Please do not email me your actual account balances or personal financial details. I do not need them, I have no secure way to handle them, and the whole design of this site is meant to ensure nobody ever has to share them.

External links

Some pages link to outside sources — IRS publications, CMS announcements, AWS documentation. Those sites have their own privacy practices, and this policy does not cover them.

Children

This is a retirement tax planning tool. It is not directed at children, and it collects no information from anyone regardless of age.

Your rights

Privacy laws such as the GDPR and the CCPA give you rights to access, correct and delete personal data that a site holds about you.

Those rights are straightforward here: I hold no personal data about you. There is nothing to access, nothing to correct and nothing to delete. If you email me and would like that correspondence deleted, ask and I will delete it.

Changes to this policy

If the site starts doing something that affects your privacy — adding analytics, ads or saved scenarios — this page will be updated before that change goes live, and the date at the top will change.

Contact

Questions about this policy: see the contact page.