Privacy Policy

Data controller & your rights (UK GDPR)

Data controller: Taper (thetaper.co.uk). Contact: hello@thetaper.co.uk

Lawful basis:

• Sending your RSU report by email: performance of a service you requested (Art. 6(1)(b))
• Storing your email for product updates (if you opt in): consent (Art. 6(1)(a))

Data processors: Supabase (database, EU region); Resend (email delivery, US -- governed by their Data Processing Agreement and Standard Contractual Clauses)

Retention:email addresses are kept until you unsubscribe or request deletion. Analytics data is retained per PostHog’s default policy.

Your rights under UK GDPR: access, rectification, erasure, restriction, portability, and the right to object. To exercise these, email hello@thetaper.co.uk. You also have the right to lodge a complaint with the ICO (ico.org.uk).

The short version

We do not store the figures you enter (salary, RSU values, share prices, and so on) unless you explicitly ask us to, by downloading a report or asking us to email you a result. We never store or transmit your raw financial figures for analytics. We track a small number of anonymous product-usage events to understand how Taper is used, but that tracking never captures what you typed into the calculator.

What stays on your device

Everything you type into a calculator (salary, vest details, share prices, and every other input) is saved only in your own browser’s local storage, so a reload does not lose your work. It is never sent to our servers as part of ordinary use of the calculators.

When we do store something

If you choose to email yourself a report, or join a waitlist for a future feature, we store the email address you give us and the preferences you tick, so we can send you what you asked for. You can remove your email at any time from the unsubscribe page. We do not sell, rent, or share your email with third parties. We do not attach your calculator inputs to your email address in storage; a downloaded or emailed report is generated and sent at the moment you ask for it, not stored alongside your contact details afterwards.

Analytics

We use PostHog, an EU-hosted product analytics tool, to understand broad usage patterns (for example, how many people reach the results step, or which guide someone read before visiting a calculator). Automatic capture of page content and form inputs is switched off for this project: only specific, deliberately chosen events are tracked (like “landing page viewed” or “calculator started”), and none of them include the actual numbers you enter. Where an event benefits from knowing roughly what income bracket a visitor is in, we use broad, pre-defined ranges rather than your exact figure.

Error monitoring

We use error-tracking tooling to catch and fix technical bugs (crashes, failed requests, and similar issues). This captures technical details about what went wrong in the code, not the contents of the form you were filling in when it happened.

Cookies and local storage

We use your browser’s local storage to remember your in-progress calculator inputs between visits, purely for your convenience. This data stays on your device and is not transmitted to us. Analytics tooling may set its own cookies or local storage entries to distinguish one anonymous visitor from another between page views.

Your rights

You can ask us what email address we hold for you, ask us to correct it, or ask us to delete it, at any time. The quickest way is the unsubscribe page. We mark your email as unsubscribed and stop all emails immediately. If you want your email address fully deleted from our records, email hello@thetaper.co.uk.

Changes to this policy

If our data practices change materially, we will update this page. See the disclaimer page for how the tools themselves are versioned.

Not legal advice

This policy is provided for transparency about our practices. It is not a substitute for professional legal advice, and has not been reviewed by a qualified solicitor. If you rely on this page for compliance purposes, have it reviewed first.