Privacy Policy

Last updated 26 September 2026

This site is a set of personal-finance calculators run by one person. This page says plainly what it records, what it sends elsewhere, and what it doesn't do. If anything here is unclear or looks wrong, please get in touch — the contact route is on the site.

The short version

• Every figure you type into a calculator is worked out in your browser. Your corpus, income, holdings and tax details are never sent to this site's servers — with one exception you control, described under Links that carry your figures below.
• The site's own records hold no IP address, location, or anything else about who or where you are. Visitors are counted against a sixteen-character code your browser derives from your IP address with a one-way hash — the address itself is never stored or sent to this site.
• Google Analytics counts which pages are visited. It sets its own cookies and works out a rough location from your IP address; if you are signed in to Google, Google may link the visit to your Google account for aggregate reports. It never receives the figures you enter. The details are under Google Analytics below.
• Every free tool and calculator here works without an account. A few advanced tools and strategies sit behind a login, and those are the only parts that need one.
• There is no advertising and no advertising tracker on the site today.

What is recorded about a visit

The counter in the footer keeps two totals: page visits, and unique visitors. Opening a page adds one visit; refreshing it, or opening the page just counted again, does not. Opening fifteen different pages is fifteen visits from one visitor.

To know whether a visitor has been here before, your browser asks ipify (a free service that only returns the address it sees) for your IP address, then turns it into a sixteen-character code with a deliberately slow one-way hash (PBKDF2, 600,000 rounds). Only that code goes to Google Firestore, with when it was first and last seen and how many pages it has opened. The address itself is never stored — not by this site, not in your browser — and the code cannot be turned back into it: the only way back is to guess addresses one by one, and each guess is made expensive on purpose. If ipify cannot be reached, a random id your browser keeps is hashed the same way instead.

Because the code comes from the connection, people sharing one — a household behind one router, say — count as one visitor, and the same person on a new connection counts again.

An earlier version of this site looked your IP address up through a third-party service and stored it along with your city, coordinates and network operator. That was more than counting visitors required, so it was removed and those records deleted. The counter since then has never stored an address, a location or a network.

Google Analytics

The site uses Google Analytics to see which pages and calculators are read, how people arrive, and roughly where from. On each page it sends Google the page's address without anything after the “?” — so a link that carries your figures, described below, never passes them on — along with the page title, the site that referred you, and the kind of device, browser and screen you are using.

Google receives your IP address with each request and uses it to estimate a city and country; Google Analytics does not log or store the IP address itself. It also sets first-party cookies (named _ga and _ga_…) holding a random id, so a return visit counts as the same visitor. Visitors in the European Economic Area, the UK and Switzerland get no Analytics cookies at all: there Google receives only an anonymous signal that a page was viewed, with no cookie id and no link to a Google account.

Google Signals is also switched on. For visitors signed in to a Google account who have allowed ad personalisation, Google associates the visit with that account, which lets Analytics report age range, gender, interests and visits across devices. The reports this site sees are totals — pages, visits, regions, devices, demographic groups — and Google withholds groups too small to stay anonymous; they never name or identify anyone. You control this in your Google account: turning ad personalisation off in My Ad Center stops your visits being associated with it.

Nothing you type into a calculator is sent. To opt out, block cookies for this site, clear them, or install Google's Analytics opt-out browser add-on. Google's own use of this data is covered by its privacy policy.

If you create an account

You only need an account for the advanced tools and strategies; everything else on the site is open. Signing in is handled by Google Firebase Authentication, either with a Google account or an email address and password. Firebase holds the credentials; this site never sees your password. Against your account it stores only a visit count and the time you were last seen. You can ask for the account and that record to be deleted at any time.

What stays in your browser

Some things are kept in your browser's own storage. They never leave your browser — they are not sent to this site, stored on a server or kept in any database:

• downloaded fund and index price history, cached for the day so the same data isn't fetched repeatedly;
• the portfolio comparison you last built, so a refresh doesn't discard it;
• the plans you build in the FIRE, bucket strategy and financial goal calculators — including the goals you list, what you have put towards them and the tax settings you chose — so a refresh or a later visit picks up where you left off;
• which page this tab last counted, so a refresh is not counted as a second visit;
• whether you chose the light or dark theme;
• the one-way visit code for this tab session — the one item here the site also holds a record against — and, only if your IP address could not be looked up, the random id hashed in its place.

On the other calculators the figures you enter are not stored at all: sliders, tax slab and open tab live in the page while you have it open and are gone when you close or reload it. The “Save Snapshot”, “Save report” and “Save CSV” buttons are the same story — the file is drawn and saved by your own browser, and is never uploaded anywhere. What you do with it afterwards is entirely yours.

Clearing your browser's site data removes all of it. None of it reaches this site or anyone else.

Links that carry your figures

Some calculators can hand a figure to another one. The government-scheme page can open the SIP calculator with the same contribution and period; the SIP and retirement calculators can open the SWP calculator with a corpus; the bucket strategy page can open it with your corpus, spending, return, inflation and tax slab. Those figures travel in the link itself, visibly, as part of the web address.

Following such a link from inside the site is handled by your browser alone and reaches no server. But opening or reloading one from outside — a bookmark, a message, a new tab — sends the whole address, figures included, to the host as part of the request, exactly as any web address is sent. Two things follow, and both are in your hands:

• a link like this that you forward carries your numbers to whoever you send it to, so it is worth a glance at the address bar before sharing one;
• the address of a page opened this way appears in the host's request logs the way every web request does. Nothing is stored against you — there is still no record here tying a figure to a person — but the address itself is not private in the way the figures on screen are.

Most links here carry nothing of the sort. The government-scheme page puts only the open scheme in the address, as in ?scheme=ppf, which says which calculator you were reading and nothing about your money. The only link that carries your tax slab is the bucket strategy page's hand-off to the SWP calculator.

The WhatsApp, X and LinkedIn buttons at the foot of each calculator are this same act of forwarding, done for you: pressing one hands that service the address of the page along with your own IP address, and whatever the address contains goes with it. They are ordinary links — nothing is sent until you press one — and the share buttons send the calculator's own address rather than your figures. The contact button in the corner opens WhatsApp the same way.

Where data goes when you use the site

Loading a page or a calculator causes requests to these third parties:

Each of these has its own privacy policy, and none of them is controlled by this site. Note what is not in that list: the amounts you enter. A fund lookup reveals which fund you searched for, never how much you hold in it. The one way a figure can reach the host is if you open a link that you can see contains one, which is the section above.

Cookies

Google Analytics sets two first-party cookies, _ga and _ga_…, each holding a random id so repeat visits can be counted; they last up to two years unless you clear them, and are not set at all for visitors in the European Economic Area, the UK or Switzerland. Beyond those, the site sets no cookies. Signing in stores a Firebase session token in your browser so you stay signed in; signing out removes it.

Advertising

No advertising is served on this site at present, and no advertising tracker is loaded. If that changes, this page will be updated before any ad appears, to name the advertising provider and say what it collects.

Your rights over your data

Under India's Digital Personal Data Protection Act, 2023 — and under the GDPR if you're in the UK or EU — you can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. For an account that means the email address it uses. For the visit counter there is nothing held that identifies you — the record is keyed to a one-way code, and nothing stored leads back from it to an address or a person. The same goes for Google Analytics, whose records are keyed to the random id in its cookie — and, where Google Signals has linked a visit to your Google account, Google's own account controls let you see and delete that activity. Contact details are on the site, and a request will be actioned rather than argued with.

Retention

Visitor records are kept while the site runs, since the whole point of them is a long-running count. Google Analytics keeps its visit-level records for the retention period set on the site's Analytics account, after which only aggregate totals remain. Account records last until the account is deleted. Anything cached in your browser lasts until you clear it, and the price data expires after a day regardless.

Children

The site isn't aimed at children and doesn't knowingly hold data about anyone under 18.

Security, honestly stated

Data sits in Google Firebase, protected by its access rules and served over HTTPS. This is a personal project maintained by one person, not an organisation with a security team, and it would be wrong to imply otherwise. Nothing sensitive is asked for, which is the main safeguard: there are no payment details and no financial account credentials anywhere in it.

Changes to this page

Any change to what is collected will be reflected here, with the date at the top updated. The current version is always at https://neeharams.in/privacy.

Not financial advice

Separately from privacy, and worth repeating: every calculator here is for education and planning. Nothing on the site ranks or recommends a fund or a government scheme, or suggests opening, holding or closing an account, and no figure is a quotation or a guarantee. Government-scheme figures follow the rate notified for the period stated beside each result; everything else is a projection built on assumptions you or this site select. Rates, limits and tax rules change — confirm them with the authority that publishes them.