Privacy Policy
Effective date: August 28, 2026
1. The short version
MortgageCostCalc.com runs entirely in your browser. The numbers you type — home value, down payment, income, rates, dates — are processed on your own device and are never sent to our servers. There are no accounts to create, no forms that submit anything to us, and the Site sets no cookies. We do not sell or share personal information. What we do have is what any website has: our infrastructure provider handles the request that delivers each page, and a cookieless analytics script counts page views in aggregate.
2. Who we are
The Site is operated by CodingBrothers, which is the controller of the limited personal data described below. You can reach us via codingbrothers.com.
3. What is processed, and what is not
The figures you enter are not collected. All mortgage math, the amortization schedule, the comparison and affordability tools, the CSV export, and the print/PDF report are produced locally by code running in your browser. Those figures are never transmitted to us, and we could not see them even if we wanted to.
What is processed is limited to the following.
- Delivery and security data. The Site is served through Cloudflare, which acts as our processor. Delivering a page necessarily involves your IP address, and Cloudflare logs standard technical data — approximate location, browser and device type, the URL requested, timestamps — to route traffic, block attacks, and keep the Site available.
- Aggregate analytics. Cloudflare Web Analytics records page views and page-performance timings. It sets no cookies, does not fingerprint your device, does not build a profile of you, and cannot follow you to other websites. It never receives the figures you type.
- Network error reports. Cloudflare asks browsers to report connection failures (for example a dropped TLS handshake) so it can detect delivery problems. Only failures are reported, and the reports describe the network request, not you or your inputs.
We do not collect names, email addresses, or payment details, because there is nowhere on the Site to enter them. We run no advertising, marketing, social, or cross-site tracking scripts.
4. Saved inputs stay in your browser
So your work is still there when you come back, the Site stores your most recent inputs in your browser's local storage under the keys mcc.calc, mcc.compare, mcc.afford, and mcc.refi. This is not a cookie: it is never attached to a request and never leaves your device. Entries expire automatically after 90 days. You can delete them at any time with the “Reset” button that appears when saved numbers are restored, or by clearing site data in your browser. If storage is unavailable — private browsing, for instance — the Site simply does not save anything and works normally.
5. Share links
The “Share” button builds a link with your scenario encoded in its address, so that opening it restores those numbers. The link is created on your device. Be aware that anyone who receives it can see the figures in it, and that — as with any web address — it may be retained in browser history, chat logs, or server logs along the way. Do not share a link whose figures you consider confidential.
6. Downloading, printing, and copying
The CSV export and the PDF report are generated on your device and never pass through our servers. Copying a share link uses your browser's clipboard, and on touch devices the “Share” button may open your operating system's own share sheet; where the link goes next is handled by your device and the app you pick, not by us.
7. The embeddable widget
The calculator can be embedded in other websites. The embedded widget loads no analytics and writes nothing to storage. It sends its own rendered height to the surrounding page so the frame can size itself correctly, and nothing else — no inputs, no identifiers. Visiting a page that embeds the widget therefore reports nothing about you to us beyond the request that delivers the widget's own files. If you operate a site that embeds it, you remain responsible for your own privacy disclosures to your visitors.
8. Cookies
The Site sets no cookies of its own, and there is no cookie banner because there is nothing to consent to. Cloudflare may set a strictly necessary cookie to distinguish automated traffic from human traffic when its security features require it; such a cookie is used only to protect the Site and not to profile you.
9. Legal bases and retention
Where the GDPR applies, we rely on our legitimate interest (Article 6(1)(f)) in delivering a working, secure website and in understanding aggregate usage — an interest we have deliberately kept narrow by choosing cookieless analytics and by keeping your figures on your device. Delivery and security logs are retained by Cloudflare for a short period under its own retention schedule; analytics are aggregated and not tied to an identifiable person. We keep no database of visitors.
10. International transfers
Cloudflare operates a global network, so a request may be handled by a server outside your country, including in the United States. Cloudflare provides for such transfers through the safeguards described in its own data-processing terms.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port personal data about you, to object to or restrict its processing, and to lodge a complaint with your data-protection authority. If you are a California resident, the CCPA/CPRA gives you rights to know, delete, and correct, and to be free from discrimination for exercising them.
In practice there is very little for such a request to reach: we hold no account, no profile, and no record of the numbers you enter. The saved inputs described in section 4 are already entirely under your control and can be erased from your browser at any time. We have never sold or shared personal information, and we do not do so now — including for cross-context behavioral advertising. To make a request, contact us using the details in section 16.
12. Do Not Track and Global Privacy Control
Because the Site does not track visitors across websites and does not sell or share personal information, there is nothing for a Do Not Track or Global Privacy Control signal to switch off. Sending one changes nothing about how the Site behaves, because the behaviour those signals guard against never happens here.
13. Children's privacy
The Site is a general-audience tool, is not directed at children, and does not knowingly collect personal information from anyone, children included.
14. Links to other sites
The Site links to a small number of third-party websites, which have their own privacy practices. We are not responsible for them; review their policies before providing information.
15. Changes to this policy
If our practices change, this policy will be updated and the effective date above revised. Material changes will be reflected here before they take effect.
16. Contact
Privacy questions and rights requests can be directed to the Site's operator via codingbrothers.com. See also our Terms & Conditions.