Privacy

The short version

This site has no accounts and no marketing list. The numbers you type into the calculators stay in your browser and are never transmitted to us. The one way to send us anything is the contact form, and what you write there goes to our inbox as an email — nowhere else. We use Google Analytics to count visits, and Cloudflare serves the pages. We do not sell or share data, and we run no advertising and no advertising trackers.

The rest of this page is the detail.

What stays in your browser

The calculators run entirely in your browser: the prices, incomes, credit scores and ZIP codes you enter are computed on your device and are not sent anywhere. Two things are stored locally so the site works better on a return visit:

• your theme choice — light, dark or system;
• a shared calculator profile — the values you typed, so the next calculator opens filled in. It expires after thirty days.

Both live in your browser’s local storage, on your device only. Clearing your browser’s site data removes them. We never receive either one.

What Google Analytics collects

We use Google Analytics 4 to understand which pages get read and roughly where readers come from. Through it, Google collects:

• pages viewed, and when;
• the referring site or search engine;
• an approximate location derived from your IP address — Google truncates the address and does not pass it on to us;
• device type, operating system, browser and screen size;
• a randomly generated identifier that distinguishes one browser from another.

It sets two cookies, _ga and _ga_<measurement-id>, which expire two years after your last visit. We see aggregated reports only — never an individual person, never a name, never an email address, because we never have one.

We do not store analytics data on our own servers or export it. It lives in Google Analytics under Google’s retention settings, and Google’s privacy policy covers what Google does with it as our processor.

The analytics tag does not load at all on our embeddable widgets: if you have put our calculator or rate widget on your own site, your visitors are not counted by us.

How to opt out

Any of these works, and none of them changes how the site behaves:

• Google’s official opt-out browser add-on;
• any content blocker or a browser that blocks analytics by default;
• your browser’s Global Privacy Control setting, if it has one.

The contact form

If you write to us through the contact form, the message and the reply address you give are sent to our email inbox and live there like any other correspondence. They are not stored in a database, not added to any list, and not used for anything except replying to you. The form carries an invisible anti-spam field; if a challenge widget is ever added to it, its provider will be named here.

Hosting

The pages are served by Cloudflare, which necessarily sees what any host sees — IP addresses, request times, user agents — and processes it to deliver and protect the site under its own privacy policy. We do not keep our own server logs.

The data we publish

Pages about lenders, counties and metro areas are derived from public Home Mortgage Disclosure Act filings. That dataset is published by the CFPB with borrower privacy protections already applied, and we publish only aggregates — medians and counts over hundreds or thousands of loans — never an individual record. Nothing on this site comes from, or can be linked to, our visitors.

If you are in California

Under the CCPA as amended by the CPRA, you have the right to know what personal information is collected, to delete it, to correct it, and to opt out of its sale or sharing.

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the CPRA. We have no customer records to delete or correct, because we collect none. The only personal information involved is what Google Analytics gathers as described above, and it reaches us as aggregate statistics.

To exercise any right, or to ask what we hold about you, write to hello@apr.net. You will not be treated differently for asking; there is nothing here to withhold. The California Attorney General’s CCPA page explains the rights in full.

If you are in the EU or UK

The site is written for a United States audience and we do not target the EU or UK, but the pages are reachable from anywhere. If you visit from there:

• the lawful basis for analytics would be consent, and this site does not currently show a consent banner — if that matters to you, block analytics before browsing, or use the opt-out above;
• Google and Cloudflare process data in the United States under their own transfer mechanisms;
• you have the rights of access, rectification, erasure, restriction and objection. Because we hold no identifiable data about you, exercising them against us mostly means asking Google, but write to hello@apr.net and we will help where we can.

Children

The site is not directed at children and we do not knowingly collect anything from anyone under 13. If you believe a child has sent us something through the contact form, write to us and we will delete it.

Security

There is no account system, no payment processing and no database of visitors, which removes most of what usually needs protecting. The site is served over HTTPS only, and its content is generated from public data and deployed as static files.

Contact

Questions about this policy, or about anything on the site: hello@apr.net.

Changes

If our practices change — a new analytics tool, an advertising partner, anything collected on the server — this page changes before that happens, and the date below moves with it. That date comes from the file itself, not from the build, so it moves only when the text does.