Privacy Policy

1. Who we are

In-Hand ("we," "us," "our") operates the free US paycheck take-home calculator at in-hand.net. This policy explains what data we collect from visitors to the US calculator, why, and the choices and rights available to you, including under California's Consumer Privacy Act (CCPA/CPRA) and other applicable US state privacy laws.

2. Information we collect

Data	Purpose	Protection
Salary calculation inputs gross pay, state, 401(k) %, filing details you enter	Running your calculation and showing results	Not linked to your identity; used for aggregate statistics only
Device information device type, screen size	Serving the right layout (mobile vs. desktop)	No unique device fingerprinting beyond basic categorization
Approximate location state/region, derived from IP	Defaulting your state selection	IP address is SHA-256 hashed with a daily-rotating salt immediately; the raw IP is never stored
Session identifier	Preventing abuse, understanding usage patterns	Database-backed session, 24-hour lifetime; daily salt rotation limits cross-day tracking

2.1 If you sign in

Signing in is optional. If you choose to sign in with Google (or another supported provider), we receive your name and email address from that provider to create your account — we never see or store your password.

2.2 Cookies and local storage

We use strictly necessary cookies (session, CSRF protection) and browser local storage (e.g. your light/dark theme preference). We do not use third-party advertising or tracking cookies.

3. How we use your information

• Calculating and displaying your take-home pay estimate
• Detecting and preventing abuse (bot traffic, rate limiting — 120 requests/minute per IP)
• Understanding aggregate, anonymized usage to improve the calculator
• Operating your account, if you choose to create one

We do not use your data for advertising, and we do not sell or share your personal information with third parties for their own marketing purposes.

4. Data retention

Calculation and page-view records are retained for 90 days, then deleted. Bot-detection and error logs are retained for 30 days. Account data (if you signed in) is retained until you request deletion.

5. Your California and US state privacy rights

If you are a California resident, the CCPA/CPRA gives you the right to:

• Know what personal information we collect and why
• Delete personal information we hold about you
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information — we don't sell or share personal information, so there's nothing to opt out of
• Non-discrimination for exercising any of these rights

Residents of other US states with comparable privacy laws (e.g. Virginia, Colorado, Connecticut) have similar rights. To exercise any of these, contact us using the details below.

6. Children's privacy

In-Hand is not directed at children under 13, and we do not knowingly collect personal information from children under 13, consistent with COPPA.

7. Changes to this policy

We may update this policy as the calculator evolves. Material changes will update the "Last Updated" date above.