We collect nothing.
That is the policy.

Ledger does not collect personal information. There are no accounts, no login forms, no email fields, no contact lists. The calculators accept numerical inputs, perform a calculation, and return a result. The inputs are not stored on our servers beyond the duration of the HTTP request.

We do not use Google Analytics, Facebook Pixel, Hotjar, Mixpanel, Segment, or any other analytics or session-recording service. We do not set cookies. We do not use fingerprinting. The only log we keep is a standard Apache access log (IP address, timestamp, requested URL) which is rotated and deleted on a regular schedule.

If a MySQL database is connected to the application, calculation inputs and results may be logged with a salted hash of the requester's IP address for the sole purpose of aggregate usage statistics (e.g., "the mortgage calculator was used 500 times this week"). The raw IP address is never stored. The hashed identifier cannot be reversed to identify you. You can verify this by inspecting the source code — the hashing happens before any database write.

If you do not want even this level of logging, you can use the calculators with JavaScript enabled and the form will not POST to the server — the live client-side calculation updates as you type, without a server round-trip. The server endpoint exists only for SEO and for users who have JavaScript disabled.

We do not sell data because we have no data to sell. We do not share data with third parties because we have no data to share. This policy will not change. If it ever does, this page will be updated with a prominent notice and the change will be announced 30 days in advance.