Privacy

In short

• No accounts and no sign-in. The only time the site asks for an email address is when you write through the contact form, so the reply can reach you.
• A saved strategy stores the plan and the time it was saved. Nothing about who saved it.
• A contact message is emailed to the person who runs the site and is not stored on the server.
• Analytics runs only if you accept it, and then counts page views by path only.
• Server logs record which API routes were called and how long they took, not who called them.
• The site is served from the United States over HTTPS.

What the site stores

Saved strategies. When you save a plan, the server stores the plan itself (months, days and funds), the time it was saved, and the statistics computed from it. The plan is public: anyone with its address or browsing the leaderboard can see it. No name, network address or account is attached, because none is collected, and there is no free-text field, so a plan cannot carry a message. A plan cannot be deleted on request, because nothing links it to the person who saved it.

Share links. A backtest or contribution plan can be shared as a link. The link carries only what you entered into the form (funds, dates, pay and contribution amounts). Whoever you send it to sees those figures, so share a contribution link as you would any note about your pay.

Server logs. For each API request the server writes the method, the path, the status code and the time taken. It does not write the request body, your address, or a browser identifier. A per-address request counter protects the save, upload and contact routes from floods; it lives in memory only and each count resets within an hour. The one exception to the rule above: a rejected attempt to use the owner's upload route is logged with the address it came from, so that abuse can be seen.

Contact messages. The contact form asks for a name, an email address, a subject and a message. The four are sent as one email, through the delivery service Resend, to the mailbox of the person who runs the site, with your address set as the reply address. The server does not write the message anywhere; Resend keeps a record of the delivery under Resend's privacy policy. The email stays in that mailbox while the question is dealt with, and your address is used only to reply. A message that fills a hidden field meant for bots is discarded unread.

Hosting. The site runs on Railway, on servers in the United States, and is served over HTTPS. Railway's infrastructure keeps its own connection logs under Railway's privacy policy. The site does not read them.

What stays in your browser

Two small settings are kept in your browser's local storage and never sent anywhere: the Simple or Advanced mode choice (tspcalc:mode) and your analytics answer (tspcalc:analytics). The cookies page lists them and lets you change the analytics answer.

Analytics

The site can use Google Analytics 4 to count visits, but only after you choose Accept in the banner. Until then, and if you decline, no Google script is loaded and Google's consent mode is set to denied, so no analytics cookie is written. If you accept, each page you open is reported with its path only: the part of the address after a question mark, where a strategy or pay figure would be, is removed before anything is sent. You can withdraw at any time on the cookies page. Google's handling of what it receives is described in Google's privacy policy. Because nothing is sent until you accept, a Global Privacy Control or Do Not Track signal from your browser needs no extra step: the site already treats you as having opted out.

Other third parties

Resend, which carries contact messages as described above, and Google, only after you accept analytics. The site loads its fonts, scripts and styles from its own server and embeds nothing from anyone else. Links to tsp.gov, irs.gov, govinfo.gov and other sources take you to those sites under their own policies.

Where your data is handled

The site's server is in the United States. A contact message passes through Resend's systems and lands in the owner's mailbox. If you use the site from another country, what little it handles is handled in the United States, under this page.

Children

The site is for people with a TSP account and is not directed at children under 13. It does not knowingly collect personal information from a child; if a child has written through the contact form, say so through the same form and the message is deleted.

Your choices and rights

Apart from a message you chose to send, nothing identifies you, so there is no personal record to request, correct or delete. The one thing tied to your device is the pair of browser settings above, which you can clear from the cookies page or from your browser. To see, correct or delete a message you sent, write through the contact form from the same address; it is done within 45 days and the request itself is deleted once it is. If a law where you live gives you further rights over personal data, such as the right to know what is held, to have it corrected or deleted, or to complain to a supervisory authority, ask through the same form and the request is met. Nothing on this site is sold or shared for advertising, so there is nothing to opt out of.

Changes

If the site ever collects more than this page describes, the page changes first and its review date moves.

Contact

Questions about privacy go through the contact form. A message can be up to 5,000 characters; there is no need to say who you are beyond a name and an address to reply to.