Privacy Policy

A short summary of which data the calculators and the website use, whom you can contact, and what choices and rights you have.

Who is responsible for data collection on this website?

The operator of this website is responsible for data processing. You will find the contact details in the next section.

How do we collect your data?

Calculations run in your browser, and your inputs and settings stay there for the session. Shared links contain a scenario's values in their URL. When you visit, our hosting and Cloudflare receive connection data such as your IP address, the requested URL and browser information to deliver and protect the website. Only if you consent do Google AdSense and our affiliate partners load advertising, receiving data such as your IP address when they do.

What do we use your data for?

We use data to provide the calculators and comparisons, keep your settings during the session, deliver and protect the website and answer your enquiries. With your consent, advertising and affiliate offers help fund the website.

What rights do you have regarding your data?

Subject to the applicable legal conditions, you can request access, correction or deletion and object to processing. You can also complain to a data protection authority. Details and other rights are explained below.

If you contact us by email or telephone, we process your contact details, the content of your enquiry and any other information you choose to give us, so that we can reply. The legal basis is our legitimate interest in answering enquiries (Article 6(1)(f) GDPR); where your enquiry concerns a contract or steps before entering into one, Article 6(1)(b) GDPR applies. Our mailbox is hosted by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. The European Commission has found that Switzerland ensures an adequate level of data protection. We keep correspondence for as long as we need it to handle your enquiry, and beyond that only where legal retention duties apply or we need it to establish, exercise or defend legal claims. You can also use these contact details to ask about this privacy policy or to exercise your rights.

Every time this website is accessed, our hosting at Google Cloud and Cloudflare process technical connection data: IP address, date and time, requested URL, referrer, browser identifier (user agent) and response status. Without this data the website can be neither delivered nor protected against attacks. The legal basis is our legitimate interest in running the website reliably and securely (Article 6(1)(f) GDPR). We do not combine this data with other data or use it to identify visitors. We do not store Cloud Run's automatic request logs; application and system logs are deleted after 30 days.

This website stores data in your browser only where a feature you use strictly needs it (Section 25(2)(2) TDDDG) and, with your consent, for advertising.

In sessionStorage, the key "aa.tax-planner.state.v2" keeps your calculator inputs and settings for the browser session, and keys beginning with "aa.proposal-banner-dismissed." remember for the same session which notices about proposed tax rules you have closed. In localStorage, the country menu saves the countries you last selected (up to eight country codes) under "aa.recent-countries" so that it can list them first; this entry stays until you delete your browser data. These entries never leave your browser.

The cookie "aa_consent" stores your choice in cookie settings for 6 months. If a consent receipt cannot be sent straight away, it waits in localStorage under "aa_consent_pending" for up to 7 days. The section "Cookie settings" describes both. Cloudflare sets the security cookie "cf_clearance", described in the Cloudflare section. Share links carry a scenario's values as URL parameters and store nothing in your browser.

Cookies and browser storage from Google AdSense and our affiliate partners, and the entry "aa_affiliate_seen_v1", are used only with your consent to advertising (Section 25(1) TDDDG, Article 6(1)(a) GDPR). The section "Advertising and Affiliate Partners" lists them.

In cookie settings you decide whether to allow advertising: ads from Google AdSense and offers from our affiliate partners. One choice covers all advertising partners. If you decline, you can still use the whole website. You can change or withdraw your choice at any time with the "Cookie settings" button.

Your browser stores your choice in the cookie "aa_consent" for 6 months; after that we ask again. To document your choice, your browser sends a consent receipt to our server. It contains a random reference, the time, your choice, the language, the version of these notices and, if you change an earlier choice, the reference of the previous receipt. It contains no IP address, browser identifier or calculator inputs. If the receipt cannot be sent straight away, it waits in localStorage under "aa_consent_pending" for up to 7 days. We do not record dialogs you leave unanswered.

We keep receipts and daily totals of decisions for 36 months at Google Cloud (Firestore) in the Netherlands; backup copies may remain for up to 7 more days. The legal basis is our obligation to be able to demonstrate consent (Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR). Storing your choice in your browser is strictly necessary (Section 25(2)(2) TDDDG).

This website runs on Google Cloud (Cloud Run) in the Netherlands region (europe-west4); our contracting partner is Google Cloud EMEA Limited, Ireland. On our behalf, Google processes technical connection data such as IP addresses, request times, requested URLs and browser information to deliver and secure the website (Article 6(1)(f) GDPR). The consent receipts are stored in the same region. We have concluded a data processing agreement with Google under Article 28 GDPR: https://cloud.google.com/terms/data-processing-addendum. Where Google processes data outside the European Economic Area, the safeguards set out there, such as standard contractual clauses, apply. Calculations run in your browser; when you open a shared link, its URL parameters reach our servers as part of the page request.

We use the content delivery network and security services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare acts as a reverse proxy: your browser connects to Cloudflare servers, which cache files and pages across a worldwide network to shorten loading times and protect the website against attacks such as DDoS attacks. In doing so, Cloudflare processes technical connection data, including your IP address, the requested URL, browser information and the time of access. Cloudflare also uses your IP address to determine the country you are connecting from; we use it to choose the language and the calculator's country presets and to decide whether Google AdSense may show only non-personalised ads. The country is used only for that request and is not stored. The legal basis is our legitimate interest in a fast, reliable and secure website (Article 6(1)(f) GDPR).

For bot protection, Cloudflare adds a script to our pages that collects technical characteristics of your browser and device and sends them to Cloudflare, which uses them to tell human visitors from automated access. Cloudflare stores the result in the cookie "cf_clearance", which expires after one year. This check is strictly necessary to protect the website (Section 25(2)(2) TDDDG); the related processing is based on our legitimate interest in a secure website (Article 6(1)(f) GDPR). We do not use it for analytics or advertising.

We have concluded a data processing agreement with Cloudflare under Article 28 GDPR. Data may also be processed outside the European Economic Area, in particular in the USA. Cloudflare is certified under the EU-US Data Privacy Framework and also relies on standard contractual clauses for transfers. Further information is available in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

We encrypt the connection between your browser and this website with HTTPS (TLS). Encryption protects data in transit; it does not change the processing by us and our service providers described here.

We show advertising only with your consent (Section 25(1) TDDDG, Article 6(1)(a) GDPR). One choice covers all partners listed here; you can decline it or withdraw it at any time in cookie settings. Which affiliate offers a page shows, including the home page, follows the language and country selected in the header: German-language pages show financeAds offers, pages in other languages show Wise via Partnerize, and German-language pages for countries without a matching financeAds campaign may also show Wise. Google AdSense shows ads on pages in every language. We do not pass calculator inputs to any advertising partner.

financeAds (financeAds GmbH & Co. KG, Germany): After advertising consent, financeAds loads banners for S Broker, SMARTBROKER+, Consors Finanz, DKB, wundertax and Finanzguru, including redirects to image hosts. The images currently come from fndsda.net, Consors Finanz (static.consorsfinanz.de), Finanzguru (finanzguru.de) and, for wundertax, Amazon Web Services in Frankfurt. Each of these requests may transmit your IP address, browser and device information and the origin of this website. Consors Finanz is available only in Germany, wundertax for Germany and Finanzguru for Germany and Austria; Finanzguru's creatives are aimed at users of its mobile app. If an ad blocker hides the banner or image, this site shows a locally hosted copy whose link redirects through this site to financeAds.

Without advertising consent, this site shows only these locally hosted copies and loads no banners: displaying them contacts neither financeAds nor the advertisers and stores nothing in your browser. Clicking one first asks for your consent and opens the advertiser only once you have given it.

Clicking opens the advertiser via financeAds. This processes your IP address, browser and device information, the referring website, a click identifier and, where applicable, information about a resulting sale. financeAds may use third-party cookies to attribute clicks and sales, and we may earn a commission. Attribution windows after a click: S Broker 60 days, SMARTBROKER+ 60 days, Consors Finanz 90 days, DKB 30 days, Finanzguru 30 days, wundertax 90 days. To rotate offers, your browser remembers the offers already shown for 30 days in localStorage under "aa_affiliate_seen_v1"; the entry is deleted when you withdraw consent. Privacy information: https://www.financeads.net/Datenschutz/

Wise via Partnerize (Performance Horizon Group Limited, United Kingdom): The Wise offer is a locally hosted image and appears even without advertising consent. Displaying it does not contact Partnerize or Wise and stores nothing in your browser. Without consent, clicking it first asks for that consent. Clicking opens Wise via Partnerize; this processes your IP address, browser and device information, the referring website, a click identifier and, where applicable, information about a resulting sign-up. Partnerize sets the cookie "tPHG-PS" on prf.hn for up to 365 days, and we may earn a commission for attributed referrals. Partnerize and Wise may also process data outside the European Economic Area. Privacy information: https://partnerize.com/legal/privacy-policy, https://wise.com/privacy-policy

Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): After advertising consent, this site loads Google's ad code. Google chooses where and how many ads appear (Auto ads), selects the ads, counts views and clicks, limits repetition and detects fraud. In doing so, Google processes your IP address, browser and device information, the page address, ad views and clicks, cookie identifiers and your approximate location as an independent controller. In the European Economic Area, the United Kingdom and Switzerland, or if the country is unknown, we request non-personalised ads only; elsewhere Google may personalise ads using its cookies and your Google ad settings. To decide this, this site asks its own server for the country your connection comes from; the answer is not stored. Pages opened from a shared calculator link, this privacy policy and the imprint load no AdSense, so calculator values in a link never reach Google. Google may also process data outside the European Economic Area, including in the USA.

Without advertising consent, Google's ad code is not loaded. If you withdraw consent, this site deletes the AdSense cookies and storage entries on its own domain and reloads the page. Cookies and browser storage: __gads and __gpi (13 months), __eoi (6 calendar months), IDE on doubleclick.net (13 months in the EEA and UK, 24 months elsewhere; set by Google) and, in localStorage, google_adsense_settings, google_ama_*, google_auto_fc_cmp_setting, __lsa__, __lsr__, __lsv__ and _GESPSK-* (no fixed expiry; deleted on withdrawal). Cookies on the domains of Google and the partners are managed in your browser, with the partner or in your Google ad settings. Privacy information: https://business.safety.google/privacy/, https://policies.google.com/technologies/partner-sites; ad settings: https://myadcenter.google.com/

Personal data goes only to the service providers we use to run this website and our email: Google Cloud (hosting), Cloudflare (delivery and security) and Proton (email). Google Cloud and Cloudflare process data on our behalf under data processing agreements. With your consent, Google (AdSense) and our affiliate partners also receive data, as described in "Advertising and Affiliate Partners"; they process it under their own responsibility. Authorities receive data only where we are legally obliged to disclose it.

Google services may involve processing outside the European Economic Area, including in the USA. At https://policies.google.com/privacy/frameworks Google explains when it relies on adequacy decisions such as the EU-US Data Privacy Framework or on standard contractual clauses. For hosting, the Google Cloud processing terms linked in the hosting section apply.

We rely on these legal bases under the GDPR: delivering and securing the website on our legitimate interest (Article 6(1)(f)), advertising and affiliate offers on your consent (Article 6(1)(a)), documenting consent and other legal obligations on Article 6(1)(c), and enquiries about contracts on Article 6(1)(b). Storing information in your browser and accessing it is also governed by the TDDDG: what is strictly necessary for a feature you request is allowed without consent (Section 25(2)(2) TDDDG); everything else requires your consent (Section 25(1) TDDDG).

Our legitimate interests are providing the calculators reliably, keeping your settings during a session, protecting the website against attacks and misuse, finding technical faults and answering enquiries.

We keep personal data only as long as its purpose requires or a legal retention duty applies, and delete it afterwards. In detail:

Calculator settings in sessionStorage last for the browser tab's session; if your browser restores a session, it may restore them too. The entry "aa.recent-countries" stays in localStorage until you delete your browser data. Your choice in cookie settings lasts 6 months; we keep consent receipts and daily totals for 36 months. Cloudflare's cookie "cf_clearance" expires after one year. The advertising partners' periods are listed in "Advertising and Affiliate Partners".

Application and system logs at Google Cloud are deleted after 30 days; we do not store Cloud Run's automatic request logs. We keep correspondence as long as needed to handle the enquiry, meet legal retention duties or establish, exercise or defend legal claims.

Shared links contain the scenario values themselves. Deleting a link or your browser history does not delete the copies held by the people you shared it with.

You do not have to give your name or any other personal details to use the calculator. Entering scenario values and sharing links is voluntary, and you may use made-up values. If you contact us, we need enough contact and enquiry information to reply. Technical connection data is unavoidably processed when the website is delivered.

We do not use calculator inputs for decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. With your consent, Google may select personalised ads outside the European Economic Area, the United Kingdom and Switzerland; the section "Advertising and Affiliate Partners" describes this.

We update this privacy policy when the website, the services we use or the law change. The version published here applies; the date at the top shows when it was last updated. If a change requires new consent, we will ask you again.

This privacy policy uses the terms of the General Data Protection Regulation (GDPR). The most important ones are explained here.

a) Personal data

Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject

Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

c) Processing

Processing is any operation or set of operations, whether or not by automated means, performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, restriction, erasure or destruction.

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

e) Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) Pseudonymisation

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately.

g) Controller

Controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

h) Processor

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) Recipient

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.

j) Third party

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who are authorised to process personal data.

k) Consent

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she signifies agreement to the processing of personal data.