Local by default,explicit when hosted.

PUBLIC / 02

A share link is public by design

A share link contains the values needed to reproduce the calculation. Those values take priority over any draft already saved in the recipient’s browser. The local title of a named scenario is not included.

If you applied historical evidence, the link also includes the selected area, category, period and source information so the assumption can be explained. It does not include a full property address, but an area may still be identifying when combined with other information.

Complete URLs may appear in browser history, messaging apps, screenshots, browser extensions and any service or person you give them to, and a recipient can forward them. Removing your local draft or saved scenario does not revoke a link already shared. Use rounded values if exact numbers are sensitive.

AGENT API / 03

Hosted calculation is an explicit choice

The public JSON API and MCP tool run the same calculation on Vercel. To produce a result they receive the scenario values sent in the request, such as property price, rent, deposit, mortgage and growth assumptions. Do not include names, addresses, account details or free text: the interfaces neither need nor provide fields for them.

Where hosted request information is personal data, we rely on our legitimate interests in providing, securing and preventing abuse of the calculation service requested by the caller. We minimise that processing through a strict numeric schema, small request limit, no authentication profile and no intentional request-body retention. Use the browser calculator instead when you do not want scenario values sent to this service.

Hosted API and MCP calls are not instrumented with the calculator’s custom analytics events. Read the agent interface guide for the exact accepted fields.

ANALYTICS / 04

Aggregate usage analytics

We use Vercel Web Analytics and Speed Insights to understand, in aggregate, how the calculator is used and performs. This helps us improve its usability, reliability and explanations.

How we limit analytics

Before analytics are sent, the site removes share-link contents and other information added to the page address. Events use a small set of fixed labels and never include an entered value.

The analytics service does not use cookies or track a visitor between different days or websites, and performance measurements are reported anonymously. We do not use session replay, advertising pixels, cross-site tracking or profiling. Read the analytics privacy information ↗ and performance privacy information ↗.

Purpose, legal basis and your objection

Where this processing involves personal information, our UK GDPR lawful basis is the legitimate interest in understanding and improving the service. We limit the effect on visitors by using aggregate measurements, excluding financial values and providing a free browser-level opt-out.

For storage or access technologies used solely for these statistics, we rely on the statistical-purposes exception under the Privacy and Electronic Communications Regulations. The ICO’s current exception guidance ↗ requires clear information and a simple, free way to object. You can object on this device below.

SERVICE / 05

What the service receives

The browser calculator itself does not send your entries to us. Hosted API and MCP requests are the separate, deliberate exception described above. Our hosting provider receives the ordinary request information needed to deliver and protect the site, plus the limited analytics described above when they are enabled.

Where this request information is personal data, we rely on our legitimate interests in delivering, securing and protecting the site.

You can read the hosting provider’s privacy notice ↗ for information about its services. Following a link to GOV.UK or another external source also takes you to that site under its own privacy terms.

An older-format share link may include its scenario values in the first request sent to the hosting provider. The site then replaces it with the current share-link format. New links keep those values within the browser.

CONTACT / 06

When you choose to contact us

An email may reveal your name, email address, message, any attachments and the usual delivery details associated with email. We use that information to answer questions, investigate error or accessibility reports, and handle privacy requests or complaints.

Google provides the published project inbox and therefore processes the contact information needed to route, protect and store those messages. We do not sell correspondence or use it for marketing.

RETENTION / 07

How long information remains

We keep personal information only while it serves the purpose described here, then delete or anonymise it unless a legal or regulatory reason requires longer retention.

Browser scenarios

Until you delete them, clear this site’s data, or the browser removes its saved site data. We cannot delete information stored only on your device.

Hosted calculations

Request bodies are used to answer the API or MCP call and are not intentionally kept by the application. There is no scenario database. The hosting provider may retain ordinary operational and security records under its documented service criteria.

Analytics

Anonymous analytics reports are available to us for up to one month. We do not download or keep a separate archive. The analytics provider may retain service data under its own privacy terms.

General email

Up to 12 months after the question, accessibility report or error report is resolved, unless a shorter period is sufficient or a continuing issue requires longer.

Privacy cases

Privacy requests, complaints and the records used to track them are normally kept for up to three years after closure so we can demonstrate how the matter was handled. They may be kept longer if an investigation or legal requirement makes that necessary.

Hosting, security and email providers keep operational records according to their own documented security, legal and service criteria. We review our own records and delete them sooner when there is no continuing need.

TRANSFERS / 08

Providers and international processing

Vercel Inc. hosts and protects the site and provides the aggregate analytics described above. Google LLC provides the Gmail inbox used for project correspondence. Both are based in the United States and may also process information in other countries outside the United Kingdom.

Transfers to participating US organisations are protected by the UK Extension to the EU–US Data Privacy Framework, commonly called the UK–US data bridge ↗. Vercel and Google state that their certifications cover information received from the UK. Read Vercel’s Data Privacy Framework statement ↗ and Google’s data-transfer frameworks ↗. You can ask decisionsmadeeasier@gmail.com for more information about the safeguards relevant to your information.

Browser-saved scenarios remain on your device. Vercel receives scenario inputs only for a deliberate hosted API or MCP request. Google receives calculator information only if you choose to include it in an email.

RIGHTS / 09

Your rights and how to complain

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or receive your personal information, and to object to processing. These rights are not absolute, but we will explain any lawful reason why a request cannot be met.

The calculator does not make a solely automated decision that produces legal or similarly significant effects, and we do not profile you. Providing personal information is not a statutory or contractual requirement, and the calculator works without contacting us.

You may also complain to the UK Information Commissioner’s Office. You do not need to wait for our process if you are entitled to approach the regulator, although the ICO will normally expect you to have raised the concern with us first. See the ICO’s data protection complaint guidance ↗.