Privacy policy.

1. Controller

The data controller / organisation under the Singapore Personal Data Protection Act 2012 (PDPA) and the controller for the purposes of GDPR Article 4(7) is the editorial team operating sufinance.xyz, reachable via the contact page. Postal address available on written request.

2. What we collect

The savings-goal calculator runs entirely in your browser. Goal amount, starting balance, monthly contribution, time horizon, and interest rate are never transmitted to us; they are processed locally and discarded when you close the page.

We do, however, process two ordinary categories of personal data:

• Server logs — IP address, user-agent string, referrer, requested URL, and timestamp. Retained 14 days for security and abuse-detection purposes (legitimate interests, GDPR Art. 6(1)(f); reasonable purpose, PDPA s. 13).
• Contact-form submissions — name, email address, and the message body you supply. Processed solely to reply to you (consent, GDPR Art. 6(1)(a); deemed consent, PDPA s. 14). Retained for two years and then deleted, unless you request earlier erasure.

3. Cookies and Google AdSense

sufinance.xyz displays advertising via Google AdSense. Google and its certified vendors set cookies on your device for ad selection, frequency capping, and limited measurement. The named cookies, their purpose, expiry, and the lawful basis under which they are placed are:

If you decline personalised advertising via the consent banner, AdSense serves non-personalised ads only. Non-personalised ads still use __gpi for frequency capping and click measurement under the legitimate-interests basis. The cookie policy contains the full list.

4. Consent management (TCF v2.3)

Consent is collected via an IAB Europe Transparency & Consent Framework v2.3 compliant Consent Management Platform. Your choice is encoded as a TC string and stored for 13 months, after which we re-prompt. You can withdraw or change consent at any time via the “Cookie settings” link in the footer.

We honour the Global Privacy Control (GPC) signal: if your browser sends GPC, we treat it as a Do-Not-Sell/Do-Not-Share request under CCPA/CPRA and as a withdrawal of consent for personalised advertising under GDPR.

5. Your rights

Under Singapore PDPA, EU/UK GDPR, CCPA/CPRA, and equivalent regimes, you have the right to: access, rectify, erase (where applicable), restrict, port, and withdraw consent or object to processing of your personal data. To exercise any right, write to the address on the contact page; we respond within 30 days (PDPA / GDPR) or 45 days (CCPA).

You may also lodge a complaint with the Singapore Personal Data Protection Commission (PDPC), the UK Information Commissioner’s Office, the California Privacy Protection Agency, or any other competent regulator.

6. International transfers

Server logs are stored in Singapore. Google AdSense transfers ad-related data to the United States under the EU-US Data Privacy Framework, of which Google LLC is a self-certified participant. Cross-border transfers under PDPA s. 26 rely on comparable-protection standards or contractual safeguards.

7. Children

sufinance.xyz is not directed at children under 16 (under 13 in the United States, under 14 in Singapore for certain consent purposes). We do not knowingly process the data of minors and do not show personalised advertising to users we identify as minors.

8. Changes

Material changes are announced on this page at least 14 days before they take effect. The current version is dated 1 January 2026.