Privacy

Effective 27 September 2026

WhatsMyR is a retirement planner. This page says, in plain words, what it keeps about you and why. It covers whatsmyr.com and myfreedomyears.app.

If you use it without an account

Your plan is saved in your own browser (its local storage) and nowhere else. Nothing you type into the plan is sent to our server. If you save a plan file, that file is on your device, not ours.

If you create an account

We keep only what the account needs to work:

• Your username.
• Your password, as a one-way hash (scrypt with a unique salt). The password itself is never stored and cannot be read back.
• Your plan, encrypted before it is written to our database, plus up to five earlier saved versions so you can restore one.
• Sign-in activity: when you signed up, signed in or out, or changed your password, and whether it worked. The network address is stored only as a keyed hash, which lets us tell sources apart without keeping the address itself.
• If you sign in with Google: Google’s account identifier for you and the email address Google shares. We ask Google for nothing more than basic profile access.

We do not ask for your name, phone number or payment details to create an account. Any names or figures you type into your plan are part of the encrypted plan.

If you ask R a question or set up from a statement

Ask R is optional and only for signed-in accounts. It answers a question about your plan using Claude, an AI model made by Anthropic. When you ask, and only after you agree on screen the first time, your question and a summary of your plan are sent to Anthropic to write the answer. In the same way, if you choose to upload a Social Security or account statement in Plan, that file is sent to Anthropic to read the benefit or balances, which are shown to you and added to your plan only if you choose to use them. The summary holds figures such as your ages, spending, balances by account type, Social Security and what the simulator shows; it does not hold your name, your username or the names of your accounts. WhatsMyR does not store your questions, the answers or the statements you upload, and none of them is written to our logs. Anthropic handles the request under its own commercial terms and privacy policy. You can withdraw your agreement at any time from the Ask R page.

Cookies

Only the cookies the site needs to work: one that keeps you signed in (for up to 30 days), one that protects forms against cross-site requests, and, during a Google sign-in, two short-lived ones that expire within minutes. There are no advertising, tracking or analytics cookies.

Counting which screens are used

To see which parts of WhatsMyR are used, our own server counts each time a screen (such as Home or Plan) is opened. We keep the screen’s name, the day, whether the visitor was signed in, and a visitor code that changes every day. The code is not your username or account number and cannot be traced back to you without our server’s secret key, and nothing you type into your plan is part of it. These counts never leave our server, no outside analytics service is used, and they are deleted after about 13 months.

What we do not do

• No outside analytics, advertising or tracking scripts, and no third-party code runs on the site (the screen counts above are kept on our own server). The one outside service that ever sees part of your plan is Anthropic, and only when you choose to use Ask R or upload a statement, as described above.
• We do not sell, rent or share your information with anyone for marketing.
• We do not use your plan for anything other than showing it back to you, showing it to anyone you share it with and, when you ask, answering your question.

Who can see what

The site’s administrator can see a list of accounts: username, a Google email where there is one, sign-in dates and counts, and whether a plan is saved and when. Administrators also see site-wide totals: how many accounts, sign-ins and refused sign-ins there were, and how often each screen was opened. That view never reads plan contents. Your plan is stored encrypted, and the keys are held by the server so it can show your plan to you.

Sharing your plan

From Settings you can make a read-only link to your plan, for example to show a partner or a financial advisor. Anyone who has the link can see your plan, without an account, until the link expires (after 7, 30 or 90 days, as you choose) or you turn it off in Settings. They see the plan and your first name if the plan has one; they never see your username, email or phone number, and they cannot change anything. We keep only a one-way keyed hash of each link, its label, its dates and how many times it was opened, so we cannot give the link back to anyone. Deleting your account turns off and deletes all its links.

Where it is stored

The service and its database run on Railway, a cloud hosting provider. Information is protected in transit with HTTPS.

Keeping and deleting

You can download your plan at any time, and you can delete your account in Settings. Deleting the account removes your account, your plan and all its saved versions from the live database straight away. Copies in server backups are removed when those backups are deleted. Sign-in activity is kept only as a rolling log of recent events.

Changes

If this page changes in a way that matters, the date at the top changes too.