Privacy
Without an account, your seven numbers never reach our servers. With the optional account, they are kept for you and only you can read them. Here is everything we collect, why, and how to say no.
Last updated October 1, 2026The short version
- No account needed. Every tool works without telling us who you are. An account is optional: it keeps your Map and reading on every device (see The optional account).
- Your numbers stay on your device unless you sign in. Signed out, the seven numbers you enter, your goal and the steps you mark done are saved only in your browser. They are never sent to our servers, our analytics, or anyone else. If you sign in to the optional account, a copy is kept in your account so it follows you to your other devices; only you can read it. The one exception is yours to make: if you press Share map, the link you copy carries those seven numbers after the
#sign, which browsers never send to any server, and whoever you give the link to can read them. Nothing is shared unless you press it. - We measure usage, not money. Anonymous analytics tell us which pages and tools are useful. We never send a financial value.
- Email is optional. If you subscribe to The Ledger we store your address to send it. Nothing on the site requires it.
- We don't sell your data and we don't run advertising trackers.
- You stay in control of the account. Download everything in it, or delete it, at any time from your account page.
What stays on your device
When you move a slider or pick a goal, the site saves your age, household income, annual spending, invested amount, cash on hand, high-interest debt, 401(k) contribution, chosen goal, the steps you have marked done, and a frozen copy of the seven numbers if you set a Plan B to your browser's local storage under the key mv-tools-profile. That is how a tool can start from your numbers instead of a blank form.
Your Library reading progress (chapters you mark as read and the last one you opened) is stored in this browser, under the key mv-library. Signed out, it is never sent to us; signed in, it is also kept in your account (below).
This data is read by the page you are viewing and by nothing else. Unless you sign in, it is not transmitted to us. Clearing your browser's site data for moneyvibe.ai deletes it, and because it is local, it does not follow you to another browser or device unless you use the optional account.
The optional account
You can create a free MoneyVibe account with your email and a password, or with Google. It exists so your work follows you: sign in on another device and your Map and reading are there. It is the same MoneyVibe account the MoneyVibe app uses. Nothing on the site requires it.
While you are signed in, we store in our database (Supabase, in the United States):
- Your sign-in: your email address and your password (kept only as a one-way hash by our sign-in provider; we never see it). If you use Google, Google shares your name and email address with us (and a link to your profile picture), and Google knows you signed in to MoneyVibe.
- Your Money Map: the same values the browser keeps under
mv-tools-profile(the seven numbers, your goal, the steps you marked done or added to the map, and Plan B). - Your reading progress: the chapters you marked as read and the last one you opened.
- Saved results: when you press Save on a calculator, the calculator, the inputs on screen (the same values a Copy link link carries), the headline result, and the date.
- Bookmarks: the chapters and articles you bookmark, and when.
Only you can read it. Each row is protected by row-level security in the database: it can be read or changed only by the signed-in account it belongs to. We do not sell it, use it for advertising, or show it to anyone else. When you sign in, the copy in your browser and the copy in your account are merged (the numbers changed most recently win; done steps and chapters read are combined), and changes sync while you stay signed in.
Download or delete everything at any time from your account page: Download my data gives you all of it as a file, and Delete my account removes your account and everything above from our database immediately. Signing out or deleting the account leaves the copy in your browser untouched; clear site data to remove that too.
What we do collect
1. Anonymous usage analytics
We use PostHog to understand which pages and tools people use. We record: pages viewed; a tool being opened; the verdict label a tool displayed (for example “ROBUST”); the name of a field you edited (never its value); goal changes; steps marked done; scenarios saved; articles read; newsletter signups (the page they came from only); and, for the optional account, that an account was created or signed in to (the method only: email or Google), that a result was saved (which calculator, never the inputs), and that a bookmark was added (chapter or article). Analytics never receive your email address or your account's data.
Each event carries a random identifier stored in your browser, plus the technical details any web request includes: browser and device type, the page that referred you, and your IP address, which our analytics provider may use to infer an approximate location such as country or city. We have switched off automatic event capture and session recording, so what you type and click is not recorded.
If your browser sends Do Not Track or Global Privacy Control, we do not load analytics at all.
2. The Ledger newsletter (optional)
If you subscribe, we store your email address, the page you subscribed from, and the date. We use it only to send The Ledger and related messages about this site. You can unsubscribe at any time on the unsubscribe page or by emailing us; after that we keep the address on a do-not-email list so we never message you again.
3. Server logs
Our hosting provider records standard request logs (IP address, browser, requested URL, time) so the site can be operated and protected from abuse. The signup form also counts recent attempts per IP address, in memory only, to limit spam.
4. When you write to us
If you email us, we keep the correspondence so we can reply and improve the site.
5. The optional account
Only if you create one: see The optional account above for exactly what it holds. We also send the emails an account needs (confirming your address, resetting your password).
What we don’t do
- We don't sell your personal information, and we don't share it for cross-context behavioral advertising.
- We don't use advertising networks, retargeting pixels, or fingerprinting.
- We don't ask for, receive, or store bank, brokerage, or card details on this website.
- We don't send your seven numbers anywhere unless you sign in, and then only to your own account, which only you can read.
Cookies and local storage
| Name | Where | Purpose | How long |
|---|---|---|---|
mv-tools-profile | Local storage (first-party) | Your seven numbers, goal, completed steps, and Plan B | Until you clear site data |
mv-library | Local storage (first-party) | Chapters you marked as read and the last one you opened | Until you clear site data |
mv-sync-at | Local storage (first-party) | When the Map and reading progress last changed, so a signed-in sync knows which copy is newer | Until you clear site data |
sb-…-auth-token | First-party cookie, only if you sign in | Keeps you signed in to the optional account | Until you sign out (at most 400 days) |
ph_…_posthog | Local storage and a first-party cookie | Anonymous analytics identifier and session (not set if you send Do Not Track or Global Privacy Control) | Cookie: up to 1 year. Local storage: until you clear site data |
Who helps us run this
| Provider | What for | What they receive |
|---|---|---|
| Vercel | Hosting the website | Standard request data (IP address, browser, URL) |
| PostHog | Usage analytics | The events listed above and the technical details of the request |
| Supabase | Database for newsletter subscribers, article content and the optional account (sign-in and the account data above) | Your email address, signup source, and date (if you subscribe); if you create an account, your sign-in details and the data listed under The optional account |
| Resend | Sending our emails, including account emails (confirm your address, reset your password) | Your email address and the message we send you |
| Sign in with Google (only if you choose it) | That you are signing in to MoneyVibe; Google then shares your name, email address and profile picture link with us |
These providers process data on our behalf to run the service. They operate primarily in the United States, so information may be processed there.
Your choices and rights
- Delete your numbers: clear site data for moneyvibe.ai in your browser. If you have an account, use Delete my account on your account page to remove its copy too.
- Get a copy of your account data: Download my data on your account page.
- Turn off analytics: enable Do Not Track or Global Privacy Control in your browser, or use a content blocker. The site works the same.
- Stop emails: use the unsubscribe page.
- Ask us anything about your data: email privacy@moneyvibe.ai to access, correct, or delete what we hold about you (for most people, that is just a newsletter address or an account). We respond within 45 days, and sooner where we can.
Residents of California and other US states with privacy laws have the rights to know, delete, and correct personal information and to opt out of its sale or sharing. We do not sell or share personal information as those laws define it. If you are in the EEA or UK and want to exercise your rights, contact us at the same address.
How long we keep it
- Newsletter address: until you unsubscribe, then a do-not-email record so we don't contact you again.
- Account and its data: until you delete the account on your account page, which removes it from our database at once; routine backups held by our database provider expire on their own schedule.
- Analytics events: only as long as they are useful for improving the site.
- Server logs: for the short period our hosting provider retains them.
- Correspondence: as long as needed to reply and keep records.
Children
This site is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.
Security
The site is served over HTTPS. Newsletter data lives in a database that is not publicly accessible; it can only be reached through our server, using restricted credentials. Account data is reached from your browser with your own sign-in, and row-level security lets each row be read or changed only by the account it belongs to. No system is perfectly secure, and if a breach affects you we will notify you as the law requires.
Changes to this policy
When this policy changes we update the date at the top, and for material changes we say so on the site. Earlier wording is available on request.
Contact
Questions or requests: privacy@moneyvibe.ai.