Privacy

Who is responsible

Palta Money (https://palta.money) is operated by Palta Tech Ltd, which is the data controller for the personal data described here. Palta Tech Ltd is registered in Scotland, company number SC717396.

For data protection questions or requests, email [email protected]. You can also use the feedback option on any page.

Calculator inputs

Mortgage, salary, stamp duty, council tax, and other calculator figures are processed in your browser so you can see results as you type. Calculators do not require an account. We do not store those calculator scenarios on our servers by default.

If you use Share or copy a link, your inputs may appear in the page URL so someone else can open the same scenario. Only share links you are comfortable passing on.

Household Plan accounts (invite beta)

Household Plan is an invite-only beta. To use it you create an email and password account with a valid invite code, then confirm your email. After you sign in, your plans can sync so you can continue on another device.

What we store on our servers: your email address, a password hash (not your password), session tokens, invite metadata, email confirmation and password-reset tokens (hashed), your Household Plan contents (income, living costs, debts, investments, and related figures), and technical logs (for example IP and user-agent under hosting). If you request access before you have an invite, we also store that email address, the time you asked, and a hash of your browser user-agent, so we can email you when there is a place. That address is not copied anywhere else.

Your plans are stored on our servers and are not end-to-end encrypted. Connections use HTTPS and our database host encrypts stored data at rest, but that does not stop Palta from reading it.

Palta operators can access synced plan contents when needed to run the product and to help with account recovery. We only look at plan contents when you ask us to, or when we need to fix a fault. Email password reset can restore access to your cloud plans.

Your browser may also keep a local working copy (for example in localStorage) for performance. Signing out removes that local copy once your changes have synced, and clearing site data removes it too. Cloud plans remain until you delete your account or plans.

Password recovery: use Forgot password on the sign-in screen. We email a time-limited reset link to the address on your account. Confirming that link lets you set a new password and keep your synced plans.

Account deletion: email [email protected] from the address on your account, or use the site feedback form. We delete account rows, sessions, and synced plan data. Any local copy on your devices remains until you clear site data yourself.

Feedback you send us

The floating feedback form is optional. If you use it, we store:

• Your message
• An optional email address if you choose to add one
• Which page you were on and its path
• Browser user-agent string and app version (to help us reproduce issues)
• The time you sent the message

Feedback is saved in our database (Cloudflare D1) and may be copied to an internal Notion workspace so we can triage improvements. We use it to fix bugs and prioritise features — not for advertising.

Council tax postcode lookup

If you use Look up on the council tax calculator, your browser sends the postcode directly to postcodes.io (a third-party open-data API) to resolve the billing authority and parish. We match parish precepts using council tax figures bundled with the site — that step does not send your postcode to our servers. We do not store postcode lookups in the feedback database.

Hosting and server logs

The site is hosted on Cloudflare Pages. Like most websites, our host may process technical data when you load a page or call an API — for example IP address, request time, and user-agent — for security, abuse prevention, and reliability. We do not use that data to profile you for marketing.

Analytics (PostHog and Cloudflare)

When analytics is enabled on the production site, we use PostHog to understand which pages and tools are used. PostHog records page views and a small set of product events (for example, clicking from a guide into a calculator, turning on a mortgage add-on, or submitting feedback). For Household Plan we record a few milestones (signed up, started a plan, completed the basics, viewed the net-worth bridge, came back on a later day) with counts only. We never send money amounts, plan names, or anything you type as analytics events, and we do not record clicks or sessions automatically. In this beta we keep analytics anonymous and do not attach your Plan account id to PostHog by default.

We may also use Cloudflare Web Analytics for high-level traffic and performance metrics (including Core Web Vitals). Cloudflare Web Analytics is privacy-oriented and does not use advertising cookies.

Local development builds usually omit these analytics scripts unless the relevant keys are set at build time.

Cookies and similar technologies

We do not set advertising cookies or social tracking pixels (for example Meta or Google Ads tags). You should not see a marketing cookie consent pop-up on Palta Money for that reason.

• Strictly necessary cookies — an httpOnly session cookie (palta_session) when you sign in to Household Plan, so we can keep you authenticated. Cloudflare may also set short-lived security or performance cookies when you visit the site. These help protect against abuse and keep pages available. They are not advertising cookies.
• Analytics — PostHog (when enabled) may store a first-party identifier in local storage and/or cookies so anonymous sessions can be measured over time. We do not use this to build advertising profiles. Cloudflare Web Analytics (when enabled) does not rely on advertising cookies. See Analytics (PostHog and Cloudflare) above.
• Local functional storage — Household Plan may keep a local copy of your plans in browser storage for performance while you work. This is not a tracking cookie.
• Session storage — If you change the design preview palette on the internal design route, we store your choice in sessionStorage for that browser tab only. It is cleared when you close the tab.

Legal bases (UK GDPR)

• Contract — providing the invited Household Plan service you requested (account, sessions, and plan sync).
• Legitimate interests — operating the public calculators, securing accounts (including rate limits), abuse prevention, hosting reliability, and understanding anonymous or aggregated use so we can improve the tools.
• Consent — when you voluntarily send feedback, especially if you include an email address so we can reply.
• Contract / steps at your request — when you ask us to look up a council tax billing authority from a postcode.

How long we keep data

Account and synced plan data are kept while your invite beta account remains active, or until you ask us to delete it. Feedback is kept while it remains useful for improving the site and fixing issues. Server logs are retained according to our host's standard periods. Analytics data is retained according to our PostHog and Cloudflare plan settings. Calculator inputs are not kept on our servers unless you submit them through feedback.

Your rights

Under UK data protection law you may have the right to access, correct, erase, restrict, or object to processing of your personal data, and to withdraw consent where we rely on it. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Access and erasure apply to account metadata (for example email and session records) and to synced plan contents we hold for your account. You can also export plans as JSON from the app.

To exercise your rights, email [email protected] (or use the site feedback form) and say what you would like us to do (for example, delete your Plan account). If you included an email, quote it so we can find the right record.

Changes

We may update this notice when our tools or hosting change. The date at the top shows when it was last revised. Material changes will be reflected on this page.

Contact

Email [email protected] or use the Feedback button on any page to reach us about privacy or your data. See also our about page for what Palta Money is and how the calculators work.