Your salary never leaves your device.
Every calculation runs in your own browser. The salary, HECS status, redundancy payment or any other figure you type is never transmitted anywhere, never stored and never shared. There are no cookies, no analytics and no account. What the server does see is a 14-day access log — and one third-party font request, which is disclosed in full below.
Last updated 15 August 2026Who is responsible for your data
| Controller | Silvano Para, an individual operating this site in a personal capacity |
|---|---|
| Contact | silvanopara@gmail.com |
| Established in | Spain — so this site is subject to the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD) |
| Data Protection Officer | None appointed. One is not required: this is not a public authority, and the site's processing is neither large-scale nor systematic monitoring. |
No postal address is published. The site is not a business, carries no advertising and sells nothing, so there is no commercial activity requiring a legal notice with a trading address. If that changes, a full legal notice will be published here first. The email address above is monitored and is the fastest route for any privacy request.
What is never collected
- Nothing you type into a calculator. Salary, pay frequency, HECS status, residency, redundancy figures, years of service — all of it is processed by JavaScript in your own browser and never transmitted anywhere. There is no salary database because no salary ever reaches the server.
- No cookies. The site sets none — not analytics, not preferences, not session. This is why you see no cookie banner: there is nothing to consent to.
- No local storage. Nothing is written to
localStorage,sessionStorageor IndexedDB. - No analytics, tag managers, pixels or advertising trackers. None are installed. As at 15 August 2026 the site loads no third-party script of any kind.
- No accounts. There is nothing to register for.
You can verify all of this yourself in about a minute: open your browser's developer tools, go to the Network tab, and use any calculator. No request leaves carrying your figures. Disconnect from the internet after the page has loaded and the calculators keep working, because the maths is running on your own machine.
What is processed, and on what legal basis
Server access logs
The web server writes a standard log line for each request: your IP address, the date and time, the URL requested, the HTTP status, the number of bytes sent, the referring URL if your browser sent one, and your browser's user-agent string.
| Purpose | Keeping the site available and secure — diagnosing faults, and detecting abuse such as scraping or attack traffic |
|---|---|
| Legal basis | Legitimate interests, GDPR Article 6(1)(f). The interest is operating a working, secure website; the processing is the minimum a web server produces by default and is not used to profile anyone. |
| Retention | 14 days. Logs rotate daily and 14 generations are kept, after which they are deleted automatically. This is the server's actual configuration, not an aspiration. |
| Recipients | Nobody. Logs are not shared, sold, exported or analysed by any third-party product. |
| Linked to calculator input? | No — and it could not be, because calculator input never reaches the server. |
Email you send
| What | Your email address, your name if you give it, and whatever you write |
|---|---|
| Purpose | Reading and replying to your message — usually a correction to a published figure |
| Legal basis | Legitimate interests, GDPR Article 6(1)(f) — responding to someone who has chosen to make contact |
| Retention | Kept while the exchange is live and for up to 24 months afterwards, so a recurring issue can be traced back, then deleted. You can ask for deletion sooner at any time. |
| Published? | No. Where a correction results from your report, the change log records what was wrong and what changed — never who reported it. You will not be named or quoted without your explicit permission. |
Who else is involved
| Party | Role | Location | Transfer outside the EEA? |
|---|---|---|---|
| Hetzner Online GmbH | Hosting — the server this site runs on, and where the access logs sit | Nuremberg, Germany | No. Within the EU. |
| Google Ireland Ltd / Google LLC | Google Fonts — serves the two typefaces. Receives your IP address as part of the request for the font files. Also provides the Gmail mailbox that receives email sent to the address above. | Ireland and the United States | Yes. See below. |
| Soluciones Corporativas IP, S.L.U. (DonDominio) | Domain registrar and DNS. Handles the DNS lookup for the domain; does not receive page content or calculator input. | Spain | No. Within the EU. |
International transfers
Hosting and DNS stay inside the EU. The transfers that do occur both involve Google:
- Google Fonts. Two typefaces are loaded from
fonts.googleapis.comandfonts.gstatic.com. Your browser's request necessarily tells Google your IP address and user-agent, as it would on any site using that service. Google relies on the EU–US Data Privacy Framework and Standard Contractual Clauses for transfers to the United States. - Gmail. Email sent to the contact address is stored in Google's systems on the same legal footing.
Your rights
Under the GDPR you can ask for:
- Access — a copy of any personal data held about you (Art. 15)
- Rectification — correction of anything inaccurate (Art. 16)
- Erasure — deletion of your data (Art. 17)
- Restriction — a pause on processing while a dispute is resolved (Art. 18)
- Portability — your data in a machine-readable form (Art. 20)
- Objection — to processing based on legitimate interests, including everything described on this page (Art. 21)
Email silvanopara@gmail.com. Requests are answered within one month, as the GDPR requires, and free of charge.
In practice there is usually very little to give you. Nothing you type into a calculator is held, so unless you have emailed, the only trace of you is a log line containing your IP address, and only for 14 days. To find it, the date and approximate time of your visit and the IP address you used are needed — identifying you from an IP alone is not something this site can do, and it will not try.
Complaining
If you think your data has been mishandled, please raise it directly first — most issues are a misunderstanding and can be fixed the same day. You do not have to, though, and you can complain to a supervisory authority at any time:
- Spain — the controller is established here, so this is the lead authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es. Complaints can be lodged through the AEPD's electronic register.
- Elsewhere in the EU/EEA — you may complain to the supervisory authority where you live or work instead.
- Australia — most readers of this site are Australian. The Office of the Australian Information Commissioner (OAIC) handles privacy complaints there, and the Australian Privacy Principles are applied to this site wherever they are relevant.
Children
This site is aimed at working adults and is not directed at children. No age verification is performed, because no personal data is collected that would make it meaningful.
Security
The site is served over HTTPS only; plain HTTP requests are redirected and HTTP Strict Transport Security is enabled. A Content Security Policy restricts the page to its own resources plus the two font hosts, and blocks form submissions and framing outright. Server access is by SSH key. The strongest protection, though, is architectural: the data that would actually matter — your pay — is never sent anywhere, so there is nothing to breach.
Changes to this policy
Material changes — in particular introducing analytics, advertising or any form of tracking — will be described here with the date they took effect, and recorded in the public change log before they go live. This page was last reviewed on 15 August 2026, when every figure on it (log retention, hosting location, third parties) was checked against the live server rather than assumed.