Privacy Policy

What we collect

Your budget allocation — the percentage you assign to each category.
A hashed connection identifier — a one-way cryptographic hash of your IP address, combined with a secret salt. This cannot be reversed to reveal your IP address.
Postal code (if you provide it) — used to determine your province for geographic breakdowns. Stored as-is.
Income (if you use the Tax Truth calculator) — used only for calculation, stored with your allocation for aggregate analysis.

What we DO NOT collect

Your name
Your email address
Your raw IP address (only the hash)
Cookies for tracking or advertising
Any analytics or third-party trackers

How IP hashing works

When you submit an allocation, we take your IP address and combine it with a secret key stored on our server. This combination is then run through SHA-256, a one-way cryptographic function. The result is a fixed-length string of characters that uniquely identifies your connection but cannot be reversed to reveal your IP address.

We use this hash solely to prevent duplicate submissions. If you submit again from the same connection, your previous allocation is updated rather than creating a duplicate.

Data storage

All data is stored in a Supabase database with row-level security policies. Aggregate results (averages across all users) are displayed publicly. Individual allocations are not publicly accessible — only the aggregate is shown.

Your rights

Since we don't collect personal identifiers, we cannot look up your specific allocation. If you wish to change your allocation, simply submit again from the same connection — your previous entry will be overwritten.

Contact

Questions about privacy? Use the feedback widget in the bottom-right corner of any page.