What we know about you

The planner sends us nothing

Every holding, price, cost basis, tax rate and spending figure you type stays in your browser. There is no account, no login, no brokerage connection and no upload. We could not show you your own plan if you asked us to, because we do not have it.

Your work-in-progress is written to your browser's local storage on your own device. It is not synced, not backed up and not visible to us. Clearing your browser data for this site removes it, and because browsers clear stored data on their own, treat it as temporary.

The free planner counts one anonymous event when somebody presses a control that comes with the file — the name of that control and nothing else. No plan, no figure, no identity, and never what you typed. It tells us which feature people actually want, which is the only way the split between free and paid gets better. Turn it off for this browser by opening any page with ?stats=off on the end; the page will say it has.

If you'd rather not take our word for any of this: the file you can buy never contacts us at all. The only requests it is capable of making are the price look-ups you press the button for, and those go straight to the price service. The build refuses to produce that file if any code in it points back at our servers. You can open it in a text editor and check — a large part of what you'd be paying for is not having to trust us.

Price look-ups

If you press "fetch latest prices", the ticker symbol goes from your browser straight to the price service — CoinGecko for crypto, Finnhub for stocks. Those requests do not pass through us, and they carry the ticker only: never your quantities, your basis or your plan. If you save a Finnhub key it is kept in your browser alone and is never written into a saved plan or a share link.

Share links

A share link carries the whole plan inside the link itself, after the # — the part of a web address that browsers never send to a server. If you send someone a link, they see the plan; we don't. Be aware that anyone you give the link to can read it, so treat it like a document.

If you buy

Checkout is run by Polar Software Inc. as merchant of record. You give Polar your name, email, payment details and enough location information to charge the right tax. We never see your card. Polar passes us your name, email address, order number and country.

We use those to: stamp your copy of the file so it is traceable to your order, send you the download link and the receipt, send you an occasional note when a new version is published, and answer you if you write in. We do not sell it, rent it, or use it for advertising, and we don't hand it to anyone except the services listed here that we need in order to do those things.

We keep order records for as long as tax and accounting law requires — seven years — and delete what we are not required to keep.

The waitlist

If you give us your address to hear when Torsalis Online launches, we use it once — to tell you it launched. No newsletter, no tips, no "just checking in". It is stored with Resend, who also send our email; open and click tracking are off. Every message carries an unsubscribe link, and you can ask us to delete the address at any time.

We publish no email address anywhere on this site. The contact form relays your message to us with your own address as the reply-to, so we can answer you and no crawler can harvest ours.

Visiting the site

Every page here, the planner included, makes one request to our own analytics that records that a page was opened. It is first-party, it sets no cookies, it does not follow you to other sites, and it carries nothing about your plan — not a holding, not a figure, not a rate.

Three further counts, each sent at most once and carrying only its own name: that somebody edited the sample table on the front page, that somebody used the planner rather than only looking at it, and that somebody clicked through to buy. They say a thing happened, never what was typed or by whom. We can see that the planner was opened forty times yesterday and used eleven times; we cannot see what anybody entered, because that never reaches us at all. You can confirm the lot yourself: open your browser's network tab on the planner and read what goes out.

Every page here, the planner included, also carries Plausible, which counts visits without cookies and without building a profile of anybody. We route it through our own address rather than loading it from theirs, so it is still one request to one place, and it records the page, the country and where the link came from. Never who.

It cannot see your plan, and that is structural rather than a promise. Your holdings, prices and figures are never sent anywhere, so there is nothing about them for a counter to count. Open the network tab on the planner and every entry is accounted for: the page itself, its icons and manifest, two analytics scripts — our host's and Plausible's, both counting that a page was opened — the single pageview each of them reports, and the price look-ups you press the button for. Not one of those carries a holding, a figure, or anything that identifies you, because your plan never leaves the page to be put in one.

The file you buy carries none of it — not the analytics, not anything. The build refuses to produce that file if a tracker or any address of ours survives into it, which is a check that runs on every release rather than a thing we remember to do.

We do not run advertising trackers and we do not build a profile of you. Our host keeps standard server logs, including IP addresses, for a short period for security and abuse prevention.

The file you buy makes no requests at all, analytics included. If even a pageview is more than you want to share, that is one more reason to own the file.

How you got here

Two things make us keep a note of where a visit came from. A few people write about Torsalis and link to it, and they are paid if you buy — their links carry ?via= and their name. And we would like to know which post or article brought people, so links we put out carry ?utm_source= and the like.

What is kept is the partner's name, the campaign name, the site the link came from, and the date. Not the full address you arrived from — only its host, because a full address can carry a search you typed or a username. And no identifier for you: no random number, no fingerprint, nothing that could be joined to anything else here or anywhere. We could not pick your visit out of a crowd with it, and neither could a partner — they are told only that somebody bought, never who.

The first source wins and then it stops changing, for thirty days. Somebody who reads about us on Reddit and comes back a fortnight later is still someone Reddit sent.

It is not a cookie. We set no cookies on this site, for this or for anything else. It is one line in your browser's own local storage, which is never sent to us or to anyone; your browser holds it, and our code reads it at one moment only, when you click through to checkout. You can look at it yourself — it is stored under torsalis.src and reads like {"via":"hive3","src":"reddit","ts":1755900000000}. Clearing your browser data for this site removes it, and so does waiting thirty days.

Arrive with a plain link and no referring site, and nothing is stored at all.

Checkout itself runs on Polar's own site, and their page sets whatever it needs to take a payment. That is theirs rather than ours, and it is covered by their privacy policy.

Your rights

You can ask what we hold about you, ask us to correct it, ask us to delete it, or ask for a copy. Use the contact form and we'll do it. If you are in the UK, EU or a US state with its own privacy law, you have those rights by statute, and we honor them regardless of where you live. If we can't resolve something, you can complain to your data protection authority.

Torsalis isn't meant for anyone under 18 and we don't knowingly collect their information.

Who we are

The data controller is Buchanan Consulting LLC, doing business as Torsalis, of 5753 Hwy 85 N #5096, Crestview, FL 32536. Reach us through the contact form.