Privacy policy

The calculators run entirely in your browser. The figures you enter are not transmitted to Pocfinn, are not written to any server, and are gone when you close the tab. Most of them need no account; four come with a free one.

Your theme choice is kept in your browser’s local storage so the site does not flash the wrong colours on your next visit. It stays on your device.

If you create an account, Pocfinn stores:

• Your email address and a username. The email identifies the account, verifies it, and is where password-reset messages go.
• A hash of your password, produced with bcrypt. The password itself is never stored and cannot be recovered from the hash — not by us either. If you sign in with Google instead, no password exists at all.
• A link to your Google account, if you use Google to sign in: the identifier Google assigns you, and nothing else. Pocfinn never receives your Google password, and asks Google only for your name, email address and the fact that you are signed in.
• Sign-in tokens, stored as hashes, so a session can be kept and revoked. They expire on their own.

Saving is always something you ask for. Nothing is recorded because you happened to type it.

• Saved calculations — the inputs and results of a calculation, under a name and description you give it.
• Daily budget entries — the amounts, dates, categories and notes you record, plus your starting balance and any monthly budget you set for a category.
• Plans — a plan’s name, the income and costs you type into it, which of your saved calculations it uses and from when, and the assumptions you set: growth, inflation, returns, starting cash. A plan stores what you enter, not a forecast; its figures are worked out on your device each time you open it.

This is financial information about you, and it is treated as such: it is readable only by your own signed-in account, it is never sold, never shared with advertisers, and never used to build a profile of you.

To know which tools people actually use and where they get stuck, Pocfinn counts visits and clicks with PostHog, an analytics service hosted in the EU. It is anonymous: it tells us, say, that the mortgage calculator is popular and that people often stop at a particular step — not who did it.

What is never included:

• anything you type into a calculator, or the results you get;
• the names, amounts or notes of anything you save;
• your email address, your account, or anything else that says who you are.

What is counted: which pages are opened, for how long and how far down; which buttons and links are pressed, by their label; which calculator or question was used and whether you were signed in; and general technical details — browser, device type, screen size, country, the page you came from, and errors the page runs into.

It uses no cookies and stores nothing in your browser. A visitor is counted by an anonymous value that changes every day, so you are not followed from one day to the next, and screens are never recorded.

There is no advertising: no advertising cookies, no ad trackers and no tracking pixels. The only cookies Pocfinn sets keep you signed in, and they are HttpOnly, so page scripts cannot read them.

Pocfinn is run by a small team and relies on a few infrastructure providers. They process data on Pocfinn’s behalf and for no purpose of their own:

• Cloudflare — serves the site and handles requests to it, and counts page visits without cookies.
• PostHog, in the EU — receives the usage analytics described above, through Pocfinn’s own address.
• Render — runs the application server.
• Neon — hosts the database where accounts and saved data live.
• Resend — delivers account emails, such as verification and password resets. It receives your email address and the message.
• Google — only if you choose to sign in with Google, and only for that sign-in.

Account data is kept while the account exists. Sign-in, password-reset and email verification tokens expire on their own and are short-lived by design.

Deleting your account deletes everything attached to it — saved calculations, plans, budget entries, categories and sign-in tokens all go with it. Deleting a plan deletes only the plan; the calculations it used are kept.

You can delete your account yourself, at any time: open the account menu, choose Settings, then Delete account. It asks once to be sure, and then the account and everything stored with it — saved calculations, plans, budget entries, categories, sign-in links and tokens — are erased at once and for good. Nothing is kept back, and it cannot be undone.

You can also ask for a copy of what is stored about you, or for it to be corrected, by emailing pocfinncontact@gmail.com from the address on the account.

Pocfinn is not directed at children and accounts are not knowingly created for anyone under 16. If you believe a child has created one, email the address below and it will be removed.

If what Pocfinn stores or who processes it changes, this page changes with it and the date at the top moves. Material changes will be announced in the app rather than made quietly.

Questions about any of this go to pocfinncontact@gmail.com.