Privacy Policy

1. Data controller

The data controller responsible for any personal data processed in connection with the FIRE Tracker website and application is the operator of FIRE Tracker. FIRE Tracker is a free, non-commercial tool that keeps no account, no database of users and no support inbox, so there is no contact address published here. Section 8 explains how to raise a concern about data protection. We have not appointed a Data Protection Officer.

2. How FIRE Tracker runs in your browser

FIRE Tracker is not open for sign-ups. Anyone visiting the application uses it in local mode, which runs entirely inside your browser:

• Everything you enter — assets, balances, liabilities, history, your assumptions, and any partner details — is stored in your browser’s own database on your device.
• None of it is transmitted to us. We never receive it, cannot see it, and hold no copy. There is no account and no sign-in.
• Because we never receive it, we cannot recover it for you, and we cannot produce it in response to a data request — there is nothing on our side to produce.
• Clearing your browser’s data for this site erases it permanently. So does using a private window, or a different browser or device, which starts empty.

Your browser may delete it for you. Safari removes stored site data after seven days without a visit, and every browser on an iPhone or iPad is Safari underneath. The application warns you about this on screen. If your figures matter to you, export them — local mode can save a copy you keep.

If you enter details about another person, such as a partner, that information is handled the same way: it stays on your device and never reaches us.

3. What we do process

Because your figures never leave your device, the list is short:

• Request logs — Serving any page produces a log entry at our host containing your IP address, user agent and a timestamp. This is how the web works: a server cannot send a page back without knowing where to send it. These logs are used to deliver the site and protect it from abuse, and their retention is set by the host rather than by us.
• Traffic measurement — Vercel Analytics counts page views and records referrer, coarse device type and country, on both this site and the application. It sets no cookies and stores nothing on your device. Your IP address is used in passing to derive the country and is then discarded rather than kept, and the identifier used to group a single visit is rotated daily, so visits cannot be linked to each other or to you. We see totals, never individuals. In the application it counts which pages were opened — never the figures on them, which stay on your device and are never sent anywhere.

That is the complete list. There is no contact address on this site, so we hold no correspondence either. We do not build profiles, we do not record what you do inside the application, and we have nothing to sell to advertisers or data brokers even if we wanted to.

4. Lawful bases

Your own figures do not appear in this table because we never receive them, so no lawful basis is required to hold them.

5. Sharing and processors

One provider is involved in running this site, and it is the same one twice. We do not sell data to advertisers or data brokers — we have none to sell.

• Vercel — Hosting. Serving any page produces request logs containing your IP address, user agent and a timestamp, kept for delivery and security. This happens for every visitor, including in local mode, and is the one thing we cannot avoid processing. Retention is set by the host rather than by us.
• Vercel Analytics — Aggregate traffic measurement across this site and the application: page views, referrer, and coarse device and country information. It sets no cookies, stores nothing on your device, and assigns you no identifier, so visits cannot be linked to each other or to you. It records that a page was opened, never what it contained.

We may use additional processors from time to time; we will update this section when that affects how your data is processed.

6. International transfers

Your data may be processed in the United Kingdom and, where our processors operate, in the European Economic Area or other countries. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations, Standard Contractual Clauses (SCCs), or the International Data Transfer Agreement (IDTA), as applicable. We only work with processors that provide GDPR-ready contractual commitments.

7. Retention

We retain nothing, because we receive nothing to retain. There is no account to close, no database to purge and no backup of your figures anywhere but your own device.

Two things outlive your visit, and neither is ours to keep or delete: the request logs our host creates in order to serve the site, held under its own retention schedule rather than one we set, and the aggregate visit counts produced by Vercel Analytics, which are totals with nothing in them that points back to you.

What you enter stays until you remove it. Clearing this site’s data in your browser erases it, and Safari does the same automatically after seven days without a visit.

8. Your rights (UK GDPR)

Under UK GDPR you have the right to:

• Access, export and portability — Your figures are already in your hands: the application exports them to a file you keep. We hold no copy, so there is nothing further for us to give you.
• Deletion — Clearing this site’s data in your browser erases everything you entered. Nothing survives elsewhere, because nothing was sent elsewhere.
• Correction — Edit your figures in the application at any time. We hold no copy to correct.
• Objection and restriction — The only processing to object to is the request logging our host performs in order to serve you a page, which cannot be switched off for one visitor while still delivering the site. The ICO route below stays open regardless.
• Withdraw consent — We do not currently rely on consent for any processing. If that changes, you may withdraw it at any time, and withdrawal does not affect the lawfulness of processing carried out before it.
• Complain — Lodge a complaint with the UK Information Commissioner's Office (ICO) (ico.org.uk). If you are in the EEA, you may also contact your local data protection authority.

Most of these rights have nothing to attach to here: we hold no account, no copy of your figures and no record of your visit beyond the host’s own network logs, so there is nothing for us to export, correct or erase on request. If you believe data protection law has been broken, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, which you may do without contacting us first.

9. Security

The strongest security measure here is structural: your figures stay on your device, so there is no store of them for us to lose. The site is served over HTTPS, so what does travel — the request itself — is encrypted in transit. Where a breach affecting personal data does occur, we will notify as the law requires.

10. Cookies

We set one cookie.

• ft_sandbox — Records that the browser-only mode has started, so the application is served to you instead of being redirected. It holds no personal data, identifies nobody, and expires when the browser session ends. It is strictly necessary for the product to work, which under PECR means it needs no consent.

We set no analytics, advertising or marketing cookies, and we use no third-party pixels or ad-tracking. We do count visits with Vercel Analytics, but it is cookieless: it stores nothing on your device and gives you no identifier, which is why there is no consent banner and nothing to opt in or out of. You can still clear or block cookies in your browser, but blocking this one will stop the application working.

11. Children

FIRE Tracker is not intended for under-18s: section 2 of the Terms requires you to be at least 18 to use the Service. Nothing entered into it reaches us whoever enters it, so there is no store of anyone’s data for us to hold or delete, a minor’s included. Anything entered on a device is cleared the same way as anyone else’s: by clearing the browser’s data for this site.

12. Automated decision-making

The projections and summaries you see are calculated by the application on your own device, from figures we never receive. We perform no profiling and make no automated decisions about you, so the additional safeguards under Article 22 of UK GDPR do not arise. What the application shows you are estimates for planning, not decisions about you.

13. Non-advisory stance

FIRE Tracker provides planning and tracking tools only. We do not provide regulated financial advice or execution services. You should verify any financial or legal decisions independently.

14. Updates

We may update this Privacy Policy from time to time. The updated policy is posted on this page with a new date at the top. We hold no addresses and no accounts, so we cannot notify anyone individually — checking this page is the only way to see a change.

15. Contact

There is no contact address for this site. Publishing an inbox would mean collecting names, addresses and messages — more personal data than this tool otherwise touches, and the opposite of the point. Concerns about data protection go to the Information Commissioner’s Office, as set out in section 8. If contact details are published later, they will appear here.