Privacy First Architecture

Your Financial Data Never Leaves Your Device

We believe financial scenario calculations should be private by default. 100% of our tax math runs locally inside your browser via Web Workers.

Zero Financial Tracking Client-Side In-Memory Only No Account Required
Privacy Architecture & BLUF Summary

True1099 is engineered on a client-side execution model: forward and reverse tax calculations process locally inside your browser via Web Workers without transmission of financial inputs to backend servers. Standard web hosting request logs (Cloudflare), voluntary feedback forms, and pseudonymous analytics session metrics operate strictly under transparent, privacy-first data processing policies.

Data Processing Location & Retention Matrix

Transparent breakdown of how data flows through True1099 across calculation, feedback, and network layers.

Summary of data categories, processing locations, and retention rules
Data Category Processing Layer Server Retention Identification Risk
Salary & Tax Calculator Inputs Local Browser Web Worker None (Executed in browser memory) None — inputs never leave browser
Edge Network Routing Cloudflare Edge CDN Ephemeral Edge Routing (Standard Web Request Logs) Pseudonymous IP (Managed by CDN)
Voluntary Bug Reports Web3Forms HTTPS Gateway Temporary Anti-Spam Transit Voluntary Email Only
Analytics & Telemetry Deferred Google Analytics & Clarity Aggregated Session Metrics (Zero salary inputs) Pseudonymous Client ID
Local In-Memory Architecture

1. Zero Server-Side Financial Compute & Zero Financial Tracking

true1099.com is architected as an autonomous, 100% static application delivered via the Cloudflare Pages global edge network. When you adjust salary sliders, contractor billing rates, health insurance stipends, 401(k) matches, PTO days, or business expense numbers, all computations and binary search reverse solving execute strictly inside your local browser thread using Web Workers.

Calculator state and simulation parameters are never tracked, logged, or transmitted automatically. No calculation inputs, wage benchmarks, tax filing parameters, or reverse solver outputs are ever sent to our servers or stored in any external database. If you close or reload the browser tab, your scenario parameters disappear from active memory entirely.

Voluntary In-App Feedback & Diagnostic Bug Reports: Calculator inputs remain 100% local. If you voluntarily choose to submit feedback, your user-provided message, optional reply email, and sanitized technical diagnostics (browser user-agent, viewport resolution, UI theme mode, and sanitized route pattern stripped of any compensation numbers) are transmitted to the maintainer via our transactional form processor (Web3Forms API) or via your device's local email client (mailto:). Client-side security filters actively scan and reject submissions containing potential Social Security Numbers or Employer Identification Numbers before transmission. Web3Forms processes these submissions as an external transactional gateway subject to its published privacy terms, with submissions retained on their servers temporarily strictly for delivery and anti-spam verification. We do not store, profile, or sell feedback messages in any marketing database.

Edge Network Infrastructure

2. Edge Network & Infrastructure Telemetry (Cloudflare)

Our website utilizes the Cloudflare global Anycast edge network for high-speed content delivery, SSL/TLS encryption, and cybersecurity defense. Like virtually all modern web infrastructure, Cloudflare edge nodes temporarily process standard HTTP network request metadata (such as IP addresses, browser user-agent strings, and request timestamps) to mitigate malicious bot traffic, prevent Distributed Denial of Service (DDoS) attacks, and route traffic to the nearest geographic point of presence.

This technical metadata is processed strictly under legitimate interest (Article 6(1)(f) of GDPR) for network resilience and operational security, and is never associated with or linked to your calculator scenarios.

Telemetry & Privacy Signals

3. Performance Analytics (Google Analytics 4) & GPC Signals

We use Google Analytics 4 (GA4) with idle deferral to measure aggregated traffic volume, popular state calculator routes, and Core Web Vitals performance. GA4 is configured with strict data minimization: no salary figures, calculation inputs, or reverse solver outputs are ever transmitted to Google Analytics.

Active Global Privacy Control (GPC) Honor: In accordance with California and multi-state privacy regulations, our client-side scripts actively inspect navigator.globalPrivacyControl. When a browser transmits a truthy GPC opt-out signal, Google Analytics tag injection is automatically halted before any tracking script loads. Users may also block telemetry using browser content blockers or the Google Analytics Opt-Out Browser Add-on.

Advertising Network Transparency

4. Google AdSense & Third-Party Advertising Cookies

To maintain free, un-gated public access to our tax equalization models without charging subscription fees or requiring accounts, we partner with third-party advertising networks, including Google AdSense.

  • Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to this site and/or other sites on the Internet.
  • Users may opt out of personalized advertising by visiting Google My Ad Center (Ads Settings).
  • Alternatively, users can opt out of third-party vendor use of cookies for personalized advertising by visiting AboutAds.info.
Client Device Storage

5. Local Device Storage & Browser Preferences

We use browser localStorage exclusively for client-side functional preferences:

  • theme: Stores your preference for Dark Mode or Light Mode across visits.
  • lastFeedbackSubmit: Stores a local timestamp to throttle spam and rate-limit duplicate feedback submissions.
  • true1099_saved_scenarios_v1: Stores up to three named comparison scenarios locally in your browser so you can evaluate job offers side-by-side upon return.

This data remains 100% on your local physical device and contains zero personal or financial identifiers.

Commercial Affiliates

6. Commercial Affiliate & FinTech Partner Links

Some tools and service platforms featured on this site (such as Collective, Gusto, Novo, and PandaDoc) are commercial affiliate partners. When you click an affiliate referral card, your browser navigates to the external partner's domain and may pass standard referral tags (e.g. partner tracking IDs). We do not share, transmit, or expose any of your calculator figures or scenarios to affiliate partners.

Statutory State Privacy Rights

7. California (CCPA / CPRA) & US State Privacy Rights

For residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA):

Notice of Collection & "Do Not Sell or Share":

  • We do not sell, rent, or share personal information or financial data with third parties for monetary or other valuable consideration.
  • We do not create consumer profile records, build demographic databases, or store salary inputs.
  • Global Privacy Control (GPC): We support and honor browser-based GPC opt-out preference signals. Because true1099.com collects zero personal user records, our site operates in complete privacy compliance by default.
International Data Standards

8. GDPR, UK DPA & International Data Rights

Under the European General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, individuals hold rights concerning data transparency, rectification, and erasure. Because true1099.com does not collect user registrations, accounts, or personal profiles, we hold no user dossier that could be retrieved or deleted.

COPPA Child Protection

9. Children's Privacy (COPPA Compliance)

true1099.com is designed exclusively for adult professionals, independent contractors, and business operators. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13 (or under 16 in applicable European jurisdictions) in compliance with the Children's Online Privacy Protection Act (COPPA).

Maintainer Communications

10. Contact & Data Protection Inquiries

For technical clarifications regarding our client-side architecture or data privacy questions, you may contact our project maintainer directly through either channel:

In-App Privacy Inquiry

Submit anonymous feedback or privacy queries via our in-browser portal:

Open Feedback Portal →
Data Controller Email

Direct email to lead architect Aman Suryavanshi:

amansurya.work@gmail.com →