The short version: nothing about visiting, and only what you choose to send.
No cookies. No accounts. Page visits are counted by GoatCounter, which sets no cookie, keeps no IP address and cannot follow you between sites. It is told the name of the page, and whether the suggested wording was copied — nothing else. The loan details you type sit in the address bar of your own browser, and this site strips them out, from the page name and from the link you arrived by, before the counter ever sees either.
Those details are used to build the page you asked for. They are not stored against you, and this site keeps no record of who visits.
One thing is kept, anonymously: when a comparison produces a result, a row records the loan type, the balance rounded to the nearest $100,000, the size of the gap found, and whether a lender was named — never which lender, never the rate, never the property value, and nothing that identifies a person. It exists so the tool can learn how often borrowers are actually overpaying, and it cannot be traced back to anyone.
The site runs on Cloudflare, whose infrastructure handles the traffic. Beyond the page count above, this site adds no tracking of its own on top, and nothing here follows you anywhere else.
Whatever you type — message, and email and name if you give them — is kept in this site's database and forwarded to my inbox by Web3Forms, a form relay service, which processes the submission in order to deliver it. Which page you sent it from travels too — the page's name only, never the figures on it. If you tick the box to include your figures, the numbers from your comparison — balance, rate, property value, loan type — travel with it. That box is off by default; left unticked, they are not sent.
Messages are deleted once dealt with, and swept from the database automatically after 90 days either way. If you gave an email address, it is used to reply to you and for nothing else — no list, no marketing, no passing on.
The services this site is built on — Cloudflare, which hosts it and its database, Web3Forms, and Stripe — run on infrastructure outside Australia, so what you send is stored and processed overseas under those services' own terms. Cloudflare also keeps short-lived operational logs of requests for debugging; this site does not use them to identify anyone.
If you sign up, your email address and the loan details you entered are kept in order to check them against each day's published rates. Nothing is watched until you click a confirmation link; nothing is recorded at all if that link cannot be sent; an unconfirmed request is deleted automatically after 7 days; every email carries an unsubscribe link, and unsubscribing deletes the record — not marks it, deletes it. Alert email is delivered by Resend, a mail service that processes the address in order to send.
So that this site cannot be used to send mail to people who did not ask for it, there is a daily limit on how many messages one address can be sent. Counting them keeps a one-way fingerprint of the address written to — not the address, and nothing else beside it — which is deleted within two days.
It goes to a payment page hosted by Stripe. No card detail, name or address from that page ever touches this site: Stripe processes the payment on their own infrastructure, under their privacy policy.
Ask through the feedback box on the main page, from the address you used. Anything held about you will be shown to you or deleted, whichever you ask for.