Privacy Policy
Last updated: 1 October 2026
Website: the IncomeGrid website (the "Site")
Who we are: The operator of this site ("we", "us"), based in Israel. We are the controller of any personal data described here.
Contact: contact details will be published on this page.
1. The short version
- You don't need an account, and we don't ask for your name.
- The Site works in your browser. The choices you make (where you pay tax, your state, your income band or tax bracket, your currency, and the Larger text setting) are stored only on your device in your browser's local storage (localStorage) and are not sent to us. The optional amount you type is not stored.
- The Site itself sets no cookies. We don't use advertising cookies, and we don't sell or share personal data for advertising.
- Our hosting provider keeps standard technical logs (such as IP address and browser type) to deliver and secure the Site.
- We count visits in aggregate with Cloudflare Web Analytics, which is cookieless (no cookies, nothing stored in your browser). See section 4. (Not active at the moment: no visit statistics are collected.)
2. Information stored only on your device
The Site saves these settings in your browser's local storage so they are still there when you come back:
| Key | What it holds | Sent to us? |
|---|---|---|
bs_profiles_us1 | Your tax profile: country or state, income band or tax bracket, currency and tax options | No |
bs_text | Your “Larger text” choice (only saved if you switch it on) | No |
These settings never leave your device through the Site. The Site has no accounts and no sign-up. The “Yields around the world” page stores nothing in your browser. To delete them, clear this site's data in your browser settings.
3. Information our hosting provider processes
When you load the Site, your browser connects to our hosting and content-delivery provider. Like any web server, it processes technical data to deliver the page and protect it from abuse: your IP address, the date and time, the page requested, your browser type and device type, and the referring page.
- Purpose: delivering the Site, security, preventing abuse, fixing errors.
- Legal basis (EU/UK GDPR): our legitimate interest in running a secure website (Art. 6(1)(f)).
- Retention: as set by the provider. We don't combine these logs with other data to identify you.
- The provider acts as our processor under its data processing terms.
4. Visit statistics (Cloudflare Web Analytics)
On the main scanner page we use Cloudflare Web Analytics, a service of Cloudflare, Inc., to count visits in aggregate: pages viewed, the referring site, browser and device type, and approximate country. A small script from static.cloudflareinsights.com sends this to Cloudflare when the page loads. It sets no cookies, stores nothing in your browser's local storage and, according to Cloudflare, does not fingerprint visitors (Cloudflare's description). On the results page we also count four actions, in aggregate, as page views with a neutral address (for example ?e=risk-3): opening the results page, choosing a risk level (1 to 5), opening an item's details, and “Show 10 more”. Nothing else is sent: your tax choices, residence, state, income band, amounts and the items you look at are never sent. (Not active at the moment: no visit statistics are collected.)
- Retention: as set by Cloudflare.
5. Forms that send data
- Report wrong data. (Not active at the moment: the form is not shown and nothing is sent.) When active, only the typed text, the item's ID and the current view (risk level, type, tax place) are sent, and only when you press Send.
- Email updates. If you tick "Get updates" and press Send, or press "Track this view" under the results, we receive your email address and the view you had chosen (risk level, type, money-back time, tax place and rate, filters, the top yield shown), the page, the time, and how you reached the site: the site that linked to us and any campaign tags in the link (utm_source, utm_medium, utm_campaign). To connect a signup with how you arrived, the linking site and campaign tags are kept in your browser storage on this device until you sign up or clear it. We use your email only to send you updates about this site: no advertising, and we do not sell or share it. It is received and stored for us by our hosting provider's form service (Netlify). Each update email includes a way to unsubscribe, and unsubscribing deletes your address.
- Feedback. The Feedback link opens a short form. When you press Send, your message and, if you add one, your email address are received and stored for us by the same form service (Netlify). We use them only to read and answer your feedback.
6. What we don't do
- We don't ask for or collect your name, account numbers, holdings, or government ID.
- We don't sell personal data, and we don't "share" it for cross-context behavioural advertising (as those terms are used in some US state laws).
- We don't knowingly collect data from children. The Site is not directed at children under 16.
- No automated decision about you has legal or similarly significant effects. The Site's calculations run in your browser on the inputs you type in.
7. International transfers
We are based in Israel. Our providers may process data in other countries, including the United States. Where the law requires, we rely on an adequacy decision (for example, the European Commission's adequacy decision for Israel) or on appropriate safeguards such as standard contractual clauses.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. This includes rights under the EU/UK GDPR, the Israeli Protection of Privacy Law, 5741-1981 (for example, the rights of access and correction), and some US state privacy laws.
- We hold very little data (usually none that identifies you).
- To make a request, use the contact details published on this page. We may need to verify the request.
- You may also complain to your data-protection authority. In Israel this is the Privacy Protection Authority. In the UK it is the ICO. In the EU it is your local supervisory authority.
9. Security
The Site is served over HTTPS. No method of transmission or storage is completely secure.
10. Links to other websites
The Site links to official data sources and, in some places, to broker or government websites. The links are plain, with no tracking or affiliate parameters. Those sites have their own privacy policies.
11. Changes
If we change this policy, we'll update the date above. If a change is material, for example adding email alerts or another analytics tool, we'll say so on the Site before it takes effect.
12. Contact
Contact details will be published on this page.