Skip to content

How your data is handled

This is a calculator-only website. There are no accounts and no sign-up, and it asks you for nothing about yourself — the one form on the site reports a problem with a page and has no field for a name, an email address or anything else that identifies you. Delivering a web page still involves some processing that is not ours to switch off, and this page describes that honestly rather than claiming the site is invisible.

What you type into a calculator

We do not collect or store the information you enter into the calculators. Your hours, dates and pay figures are worked out by JavaScript running on your own device. They are not sent to a database, a server, an analytics service, an error-reporting service or an AI service. They are not placed in the address bar, so they cannot end up in a browsing history, a shared link or a server log. They are not saved in cookies, local storage, session storage or any other browser storage, and they disappear when you close or reset the page. Copying or printing a result also happens entirely on your device. This has been tested by recording every network request and every item of browser storage while entering sample figures, calculating, switching country, resetting, copying and printing.

The country you are using is part of the page address itself, which is how the right rules are loaded. No figure you enter is ever part of an address.

Reporting an error

The footer has a “Report an error” link for flagging a problem with a calculator or a page. It is not a contact form and cannot be replied to: it asks for no name, email address, phone number or any other way of reaching you, and there is no attachment.

A report stores four things and nothing else: the category you chose, the description you typed if you wrote one, which page you reported from, and the date and time. It does not include anything you entered into a calculator, any result, the full address or query string, your IP address, any advertising or session identifier, or any browser fingerprint. The description is free text, so we ask you above the box not to put names, contact details, salary information or other personal information in it — we cannot prevent it being typed, only avoid asking for it and delete reports on a schedule.

Reports are transmitted to and stored in the site’s Lovable Cloud database. They are private: visitors cannot read, list, change or delete them, and only the site operator can view them. Nothing is emailed, notified or sent to any other service. Reports are deleted automatically 90 days after they are submitted. Checking that a submission is genuine uses only a hidden form field, the time the form was open and a limit on how many reports are accepted at once — no cookie, no persistent identifier and no third-party CAPTCHA.

An earlier, wider report form was removed before this one. What we can verify: during its development a test submission was created and then deleted, and its table contained no records when it was removed. What we cannot verify: whether copies of deleted records persist for a period in the database provider’s own backups or internal logs. We do not control those systems, so we make no claim that every copy everywhere has been erased. The same applies to reports deleted after 90 days.

Hosting, security and traffic counting

To answer your request, the hosting platform necessarily receives the technical information any web request carries: the requesting IP address, browser information, the page asked for and the time. An IP address can be personal data, so this processing exists whatever the site itself collects. Three things are worth separating.

  • Delivering the site. The pages are hosted and served through a content delivery network on our behalf, so that the site loads and stays available.
  • Security protection. The network in front of this site runs bot and abuse protection, which sets a __cf_bm cookie and inspects request characteristics. The provider documents these cookies as strictly necessary to provide the service and asks site operators to disclose them, which is what this paragraph does. A routing cookie named __dpl is also set so requests reach the correct deployment. Neither identifies you to us, neither is used for advertising or profiling, and we do not read either. Removing this protection would leave the site exposed, so it stays, and we describe it rather than pretending there is no processing.
  • Traffic counting. The hosting platform includes a first-party traffic measurement script. It reports aggregate figures only — visits, page views, visit length, referring source, device type and country — and we see nothing that identifies an individual, no profiles and no linking of visits. It observed no cookies or browser storage when tested. It still derives an approximate country from the IP address, so it is not accurate to call the site entirely measurement-free.

No Google Analytics

Google Analytics has been removed from this site. It was used here previously with a measurement ID belonging to this site alone; it has been removed from the site’s code, so nothing is loaded from Google and no page view is sent to Google. If Google Analytics cookies were left in your browser by the earlier version, this site deletes the ones it can reach (_ga, _gid and similar) the next time you visit.

The hosting platform’s first-party traffic counting described above still runs, and advertising, described below, still involves third parties.

What is outside our control and not fully known to us: the exact retention periods for infrastructure and security logs, the full list of the platform’s subprocessors and their locations at any moment, and the platform’s own internal telemetry. Those are documented by the providers rather than restated here, because we will not publish figures we cannot verify. Some of that processing is carried out for the providers’ own operational and security purposes rather than on our instructions; where a provider acts for its own purposes, its own privacy policy governs it.

Advertising

This site is free to use and paid for by advertising. Whether you are asked about it depends on where you are: in the United Kingdom and the European Union, where consent is generally required before advertising cookies and device storage, no ad network is contacted until you allow it, and refusing changes nothing about the calculators. Everywhere else advertising runs for every visitor and is not a switchable option here. That distinction is drawn from your browser’s own time zone setting alone — there is no location lookup and nothing is sent anywhere to work it out, so it can be wrong if you travel or use a VPN. Each calculator page has one 300×250 placement below the result, which loads a banner supplied by the ad network Adsterra. Requesting an ad reveals your IP address and browser details to that network and to whichever advertising partners it passes the request to, and ad networks commonly use cookies or similar identifiers for frequency capping, measurement and targeting. Adsterra’s own policies govern that processing; we do not describe it on its behalf and we invent no cookie names or retention periods for it. The banner is loaded through an Adsterra-issued alternative domain, which is their standard way of serving where ad-blocking filters block their usual address; the network and the processing behind it are unchanged. Nothing you type into a calculator is passed to it, and if the network returns no advertisement the space shows a plain link to another calculator on this site instead.

A second ad network, Monetag, runs on the same basis. Monetag supplies a single all-in-one tag and decides in its own panel which formats to run; those can include in-page formats and push notifications. Pop-unders, redirects and formats that block the page are turned off in that panel. As with Adsterra, requesting an advertisement reveals your IP address and browser details to Monetag and to the advertising partners it passes the request to, and ad networks commonly use cookies or similar identifiers for frequency capping, measurement and targeting. Monetag’s own policies govern that processing; we do not describe it on its behalf and we invent no cookie names or retention periods for it. Nothing you type into a calculator, and nothing written in the “Report an error” form, is passed to either network.

Push notifications are a separate decision made with your browser, not with this site. If a Monetag format asks to send you notifications, that prompt comes from your browser and you can refuse it; refusing changes nothing about the calculators, and your browser will not ask again on this site unless you re-enable it yourself. If you have already allowed notifications and want to stop them, block or reset notifications for this site in your browser’s site settings.

Where advertising is optional, you can withdraw it at any time from “Privacy preferences” in the footer and nothing further is loaded. Where it is not optional, every calculator still works the same with an ad blocker running. Because the purposes changed, answers stored under the previous version have been discarded and the questions are asked again.

Cookies

This site’s own code sets no cookies. The cookies that do appear are the security and routing cookies described above, set by the network that serves the site, plus the ad-network cookies described in the advertising section, which appear once advertising runs. The only other thing kept in your browser by this site is a note of how far down a page you had scrolled, so that going back returns you to the same spot. It holds nothing you typed. Whatever the ad network stores on your device is its own and is described in the advertising section above.

Who is responsible

This website is operated under the name Leave Entitlement Calculator. That is the name the site is run under; no claim is made here that it is a company or any other separate legal entity.

The precise legal position, stated rather than glossed over: under Article 13 of the UK GDPR, where personal data is collected the controller must provide its identity and its contact details. The regulator’s guidance treats contact details as something a person can use to raise a privacy question and receive a response. The “Report an error” form cannot satisfy that requirement: it is deliberately anonymous and one-way, so no reply is possible, and making it satisfy the requirement would mean collecting the very contact details this site is designed not to collect. No public email address or other contact route is published, and none is treated here as missing work the form should absorb. This is a known, deliberate gap between what the law requires and what a no-contact site provides, not a claim that the requirement has been met.

Your rights

Depending on the circumstances, you may ask for access to or deletion of your personal data, or object to its use. You can also complain to the Information Commissioner’s Office.