Your data on Irish Fintax.

Irish Fintax (irishfintax.ie) is a site for learning about Irish tax and personal finance. Irish Fintax decides how the personal data described here is used. For anything about your data, send a message through Ask a question.

The calculators work in your browser. The figures you type are not sent to us or stored, and you do not need an account to use them.

• When you ask a question: your name, email address, company if you give one, the topic you pick, your message and our replies. We use them to answer you. If you have an account with the same confirmed email address, the question also appears in your account.
• When you create an account: your name, email address and password. The password is stored only in a scrambled form (a one-way hash) that cannot be turned back into the password. If you sign in with Google, Google gives us your name, email address and the address of your profile picture instead.
• When you request a resource from the Accounting Hub: your name, phone number, email address, website and what you need it for. We use them to send you the resource.
• When you visit a page: Vercel Web Analytics counts the visit. It records the page address (without anything after a “?”), the site you came from, your country and city, and your device, browser and operating system. It sets no cookies and does not identify you: visits are told apart by a scrambled value worked out from the request, which is thrown away after 24 hours. Sign-in, account and admin pages are not counted. We use the totals to see which pages are useful.
• To stop abuse: the site counts sign-in and form attempts. It keeps only a scrambled form of your IP address and email address, never the addresses themselves.
• Emails we send: a link to confirm your address, codes to reset your password, an acknowledgement when you ask a question, and our replies.

We use this data to do what you asked for (answer your question, run your account, send a resource), and to keep the site secure and see which pages are used, which is in our legitimate interest.

• Vercel hosts the site, on servers in Dublin, and counts visits (Web Analytics, above). Like any host it keeps short-lived request logs (time, page and IP address).
• MongoDB Atlas stores the database, on Amazon Web Services in Dublin.
• Zoho delivers the emails we send.
• Google, only if you choose to sign in with Google.
• Unsplash serves some of the photos, so your browser fetches them from Unsplash's servers, as it does for any image hosted elsewhere.

Some of these companies are based outside the EU and may handle data there under the safeguards in their own terms. We do not sell your data or use it for advertising.

Only the cookies needed to sign in: one keeps you signed in, one protects the sign-in form, and one remembers which page to return to. Visits are counted without cookies, and there are no advertising cookies, so there is nothing to accept or decline.

• Questions and our replies: deleted automatically 2 years after the last message.
• Resource requests: deleted automatically 2 years after the request.
• Accounts: kept until you delete yours (Settings, then Delete my account) or ask us to. Deleting an account also deletes your questions and our replies.
• Email confirmation links expire after 24 hours and password reset codes after 15 minutes; both are then deleted.
• Abuse-prevention counts: deleted after 8 days.
• Visit counts: kept by Vercel as totals; the value that tells visits apart is thrown away after 24 hours.

You can ask to see the data we hold about you, have it corrected or deleted, or object to how we use it. Send a message through Ask a question saying what you need, and we will reply within one month.

If you are not happy with our answer, you can complain to the Data Protection Commission at dataprotection.ie.

When this notice changes, the date at the top changes with it.