Last updated: October 2026
QuantCalc does not require an account, and we never ask for your name. Like any website, our servers see the IP address a request comes from (section 2 says where it is kept). We only receive an email address if you give us one — to save a plan, to have a report sent to you, or to join our list — and we keep it, with the IP address, country, browser type and referring page it came from, for 24 months after you submit it (or until you ask us to delete it, if sooner), to deliver what you asked for and (only if you opted in) to send occasional emails. The financial inputs you enter (ages, balances, contributions, spending, allocations, tax settings, life events) are sent to our servers to run the simulation you asked for; they carry no name or email, and apart from the cases in section 2 they are processed in memory and not stored. Most of the single-decision calculators on this site compute in your browser and send nothing to us.
Simulations run on our servers (AWS Lambda), not in your browser. When you run a plan, the page sends your inputs over HTTPS (and, if you have PRO, your licence key in a request header), the server runs the Monte Carlo simulation, and the result is returned to your browser. The inputs are not kept after the run, except: (a) every page on this site sends these requests through quantcalc.app/api, and if one fails with a server error or times out, a copy of it (its inputs and query string, the request headers except the licence-key, authorization and cookie headers, and the IP address it came from) is kept for up to two days so we can diagnose the failure; a licence key sent inside the request body or the query string is not removed from that copy; (b) if you save a plan, its inputs are stored for 90 days so the link we email you can reopen it, or for 400 days if you ask for the yearly re-check, in which case your email address and the spending figure shown when you saved are stored beside it until we send that one reminder about a year later (or for up to 400 days if it cannot be sent); (c) if you ask us to email you a report, the PDF passes through our email provider (Resend) to reach you; we do not keep a copy. Server logs record one line per request (an id, the address called, the result status and size, and whether a licence key was used) but not its inputs or your IP address; they are kept for five days. Email addresses never appear in full in our logs: a log line about a purchase or an email we sent carries a masked form (such as j***@example.com with a short code that lets us match it to your address if you contact us), and licence checks log a short prefix and fingerprint of the key. To limit abuse we count requests per IP address (or per licence key); the counters are short-lived (in Cloudflare’s cache for up to an hour, in our server’s memory, reset daily), and they are never written to storage. Pages that report an error to us send the error message, the page address, your browser type and page-speed measurements; they are shown in our live logs and not stored. Settings and saved scenarios kept in your browser’s localStorage stay there, but the inputs among them (and a stored licence key) are sent to us each time you run a simulation or save a plan.
When you click a link to buy a licence, we record where the click came from: the product, the page and link you clicked, the page you first landed on, the referring site and your country. The record carries no IP address, email or other identifier, and we keep it so we can tell which pages lead to purchases.
License key purchases are processed through Creem (creem.io), a Merchant of Record that handles payments, taxes, and compliance. QuantCalc does not handle or store payment card information. To deliver and check your licence we keep a record of each purchase (the licence key, its tier and expiry, the order and your email address) for as long as the licence exists, and we email you the key through our email provider (Resend). Please refer to Creem's privacy policy for their data practices.
This site uses Google Analytics 4 (GA4) with ad-personalization defaulted off; GA4 does not store IP addresses. Analytics is on by default: GA4 sets first-party cookies to measure page views and basic usage (the page address, the features used, and broad buckets such as licence tier), not the figures you enter or your results, and it is not used for advertising. You can turn analytics off with the cookie consent banner or your browser’s tracking-protection settings. We do not run any third-party advertising or remarketing trackers. When you buy, we record which page and source led to the purchase (without your IP address). To make that possible even when analytics is blocked, your browser keeps a small first-visit note in its local storage — the address of the first page you opened here (without anything after a “?”), the name of the site that linked you, and the date — which is sent only if you open a checkout, as part of the Creem checkout link, and comes back to us with the purchase record; it holds no name, email or other identifier, is deleted from your browser when you opt out of analytics, and is replaced after 12 months. If you join our newsletter, the sign-up form sends your email address to our newsletter provider (Buttondown).
Firm names, logos, and client names entered in the Professional tier settings are stored in your browser’s local storage only and are not sent to us, except inside a PDF report you ask us to email (section 2).
QuantCalc can be connected to an AI assistant (such as Claude) through our MCP server at mcp.quantcalc.app. When the assistant calls one of its tools, we receive only that tool call’s inputs — the figures and settings it passes, such as ages, account balances, spending, allocation, filing status and state — never your conversation with the assistant. Those inputs are handled exactly as described in section 2. To give each installation its own usage allowance we assign a random session identifier; it identifies the connection, not you; it is used to count runs, with counters that reset within a day, and its first 8 characters appear in our server logs (kept five days). If you configure a QuantCalc licence key, it travels as a connection header and is used to check your tier; the key itself is not logged, only a short prefix and fingerprint of it. The assistant itself is operated by its own provider under its own privacy policy. Setup and limits: quantcalc.app/advisors/mcp.
For privacy-related questions: [email protected]
← Back to QuantCalc