Privacy Policy

Our Approach to Privacy

IndexLongRun is designed with privacy as a core principle. We believe you should be able to plan your financial future without sharing personal information with us.

What We Don't Send to Analytics

We do not intentionally send the following as analytics event data:

• Your name, email, or contact information
• Your exact financial amounts (savings, income, etc.)
• Your exact calculator inputs or monetary results

During ordinary calculator use, calculations happen entirely in your web browser and only broad scenario ranges are sent to analytics, as described below. Share links are a separate exception: their URLs contain plan information and opening a link sends the URL through our hosting infrastructure so the page can be delivered.

What We Do Collect

We use Vercel Web Analytics and PostHog product analyticsto understand how the site and Game are used. Depending on the service, this can include:

• Page views (which pages are visited)
• General device information (mobile vs desktop)
• Referrer information (how you found us)
• Approximate location derived from network data (such as country, region, or city; not precise GPS location)
• Explicit product events, such as starting a timeline or applying a decision
• Layout views and choices, and whether a saved plan existed when the initial layout was assigned
• Coarse scenario categories, such as age range, planning horizon, portfolio range, and benefit range

We do not send exact calculator values, balances, benefits, or detailed monetary simulation results in these events. We may send broad ranges derived from a scenario so we can understand which kinds of plans use the product. A range does not reveal the exact entered value, but it can be linked to other activity in the same analytics session. Scenarios may be hypothetical and do not necessarily describe the visitor's actual circumstances. Game events may include coarse gameplay outcomes, such as whether a timeline lasted and how many years or decisions were played. PostHog receives page views with query strings and fragments removed, and referrers reduced to their site origin. Analytics providers may still process ordinary network metadata such as an IP address to deliver and secure their services.

Limited Session Replay Pilot

From September 10 through September 17, 2026, we may collect masked replays of 20% of eligible sessions to understand navigation problems. These reconstruct page layout, clicks and scrolling; they do not record your camera or your screen outside this site. Inputs and financial results are masked. Reviewed public interface text, such as navigation, field labels, help descriptions and calculation/save status messages, stays readable. We also collect whether a Save interaction reached the button and activated it, why it was disabled, whether a draft preview was ready, input-focus and control-visibility state, calculation/save duration and broad error categories; these diagnostics contain no entered values or raw error messages. Keyboard visibility is estimated from browser viewport changes. Mobile keyboard layout offsets are retained so controls appear in the right place in a replay. The reviewed result-preview dialog keeps public headings and controls readable while financial content stays masked. Financial charts, other dialogs (including sharing and feedback), images and embedded content are blocked. Query strings, fragments and sensitive element attributes are removed before transmission. Console logs, network payloads and canvas recording are disabled. PostHog processes these recordings for our site team and retains them for 30 days, its shortest available retention period on our plan.

We respect Do Not Track and Global Privacy Control for session replay. You can also disable it below; this preference is saved in this browser. The pilot stops automatically on September 18 at 00:00 Israel time.

Cookies and Browser Storage

We use minimal browser storage necessary for the site to function and measure usage:

• Vercel Web Analytics: Does not use cookies and reports aggregated page usage
• PostHog: Uses session storage for an anonymous identifier that expires with the browser session
• No advertising cookies: We don't run ads or use advertising trackers
• No advertising tracking: We don't share data with advertisers or data brokers

Feedback and Support

If you send feedback, we receive the message you write and any reply email you provide. If you include screen details, the message also contains the screen name, layout, mobile or desktop device category, and application version. We do not attach your saved financial plan, account names, calculator values, or shared-plan URL. Please avoid entering sensitive financial information in the message itself.

Resend processes outgoing support messages and their delivery records. Messages are delivered privately to indexlongrun@gmail.com and kept in our Gmail support mailbox to respond and improve the service. Feedback text and reply addresses are not sent as analytics events. Our hosting service processes the request, and temporary network-based limits help prevent spam. You can contact the same address to ask us to delete your support messages.

Local Storage

We use your browser's local storage to save calculator settings between visits. We also remember your layout choice and whether a saved plan existed when the new layout choice was first assigned. This keeps your chosen layout stable between visits. The stored financial plan stays on your device; analytics receives only the categories described above, including layout and initial visitor group. If you choose to create and send a share link, the link contains the plan information needed to reconstruct that scenario, so anyone who receives the link can access it. We remove query strings and fragments from analytics page events, but the hosting infrastructure may process the requested URL when a link is opened.

Third-Party Services

We use the following third-party services:

• Resend: Sends feedback and support emails. See its privacy policy.
• Google/Gmail: Receives and stores messages in our support mailbox.
• Vercel: Hosts our website. Their privacy policy is at vercel.com/legal/privacy-policy
• PostHog: Provides product analytics. Their privacy policy is at posthog.com/privacy
• GitHub: Hosts our open-source code. We link to our repository but don't share your data with GitHub.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this privacy policy from time to time. We will update the "Last updated" date at the top of this page.

Contact

If you have questions about our privacy practices, you can reach us through our GitHub repository.