Retirement Calculator Privacy and Data Practices

Income figures stay in the worksheet

Ordinary retirement calculator inputs and computed dollar results are evaluated in your browser. The normal calculation does not send pension amounts, Social Security benefits, deduction entries or approved later-year assessments to our event endpoint. A later-year primary-source reference also stays local. Sharing sends the page address rather than serializing the financial fields. Printing uses your browser. You should not place personal records into a public source URL or correction message.

First-party usage events

After eligible interactions the page sends one small “tally beat” to this site’s own /tally/beat address. The events table contains a timestamp, day, site, pathname, event name, bounded interaction label, a random identifier for that one page view, referring host, country, mobile/desktop classification, page template and coarse acquisition source/medium. Events include viewing a page, interacting with a calculator, following a state/source link, sharing, printing and deep scrolling. Event labels describe a feature or jurisdiction rather than the financial input values.

Queries, identifiers and provider processing

The stored event path excludes the query string. The random view identifier is not a persistent device identifier and is not written to a cookie or local storage by this telemetry. Automated-client user agents are checked at ingestion and discarded from the event row; raw IP address and user agent are not columns in that table. The hosting provider still processes requests and may retain operational security, request or performance information under its own service practices. Those provider records are distinct from the application’s bounded usage events.

Disputes you choose to file

A dispute sent from the contact page is written to a separate ledger with its arrival time and day, this site’s name, the page path you named (with anything after “?” removed), the concern you picked, your explanation and an email only if you typed one. Tally beats and disputes never share a table, and neither one records an IP address or a user agent. A message can contain personal information if you type it, so use public sources and synthetic examples and avoid sending tax returns, account identifiers or medical records.

Purpose, access and retention

We use aggregate events to identify which retirement guides and features visitors use and to reproduce usability problems. Correction reports support rule review and replies where an address is supplied. This notice does not promise a fixed automatic retention deadline or an agency confidentiality status that the site does not implement. Ask about a specific report through the contact form if you need access or deletion, supplying only enough information to identify the record.

Other services

Official-source links leave this site and follow the linked service’s privacy practices. Ad code is conditional on an explicit configured enablement; no ad request is made by the default publication. The verified retirement release does not introduce a new tracking service. Review the browser’s network controls and source links before intentionally disclosing information, and use the contact channel for questions about these practices.