planin30 does not collect personal information without consent.
Cookies
We use a small number of strictly necessary cookies to operate the site: a session cookie to keep you signed in, and a functional cookie that prevents spam in our feedback form. These are set only when you use those features and can’t be turned off without breaking them. Our analytics is cookieless (see below), and we use no advertising or cross-site tracking cookies — so there is nothing non-essential to consent to, and we don’t show a cookie-consent banner.
Third-party analytics
We use privacy-friendly analytics (Vercel Web Analytics) to count page views and referral sources. Vercel Web Analytics stores no cookies and does not collect your IP address. To opt out, set Do Not Track in your browser.
First-party product data
We also record limited first-party product events — for example, when an unsigned visitor tries to save calculator work or begins signup. These records may include the event name, the calculator’s identifier, the page path, a timestamp, a short-lived random “flow” identifier stored alongside your in-progress save, and a salted hash of your IP address used solely for abuse prevention and rate-limiting. We do not store your calculator inputs, your raw IP address, or use this data for cross-site advertising, and we do not sell or share it with third parties. Anonymous event records are retained for up to 12 months; IP hashes for up to 30 days; both are then deleted.
Suite-specific data
When you sign in to one of the product apps (Financial, Budget, or Advisor) and save a scenario, that scenario is stored against your account so you can revisit and share it. The marketing site itself never reads or writes that data.
Email and communications
When you sign in, we send transactional emails you requested — your magic-link sign-in link and account-related notifications. We do not send marketing email. If we add product updates or a newsletter in the future, they will be strictly opt-in and every such message will include a one-click unsubscribe link.
Service providers
We rely on a few trusted providers to run GuideNext, Inc., each processing data only to deliver their service to us: Vercel (hosting, content delivery, and the cookieless analytics above), Supabase (database and authentication), Resend (delivery of the transactional emails above), and Google Workspace (our staff email). When paid plans are active, Stripe processes payments — we never receive or store your full card details.
Your choices and rights
You can request a copy of, or deletion of, your account data at any time — contact us and we’ll respond within 30 days. Deleting your account removes your saved scenarios and profile. Depending on where you live (for example, the EU/UK under GDPR or California under the CCPA), you may have additional rights to access, correct, port, object to, or delete your personal data. We do not sell your personal information.
Data security
Traffic is encrypted in transit (HTTPS), authentication is handled by Supabase, and access to stored data is restricted. No system is perfectly secure, but we work to protect your information and will notify affected users of any material breach as required by law. To report a security concern, use our contact page.
Contact
Questions about this policy or GuideNext, Inc.: see the contact page.