Privacy Policy

Last updated: 26 September 2026

The short version: KeepVista is a calculator that runs entirely in your browser, and the figures you enter stay there. The tax maths happens on your device; a result link you share carries the figures after a "#", the part of an address browsers never send to a server. We do measure how the site is used, with our own events: they never contain your figures (at most a coarse income band such as "50–100k") and carry no identifier. Like most websites, our CDN also logs each request it receives, with your IP address, for 30 days.

Who we are

The data controller is Gaperi Consult S.R.L., Strada Nicovalei nr. 64, Brașov, Romania (CUI 46640245, Trade Register no. J8/2526/11.08.2022), which operates KeepVista (keepvista.com). Questions or requests: contact@keepvista.com.

What we process

Your calculator inputs (gross income, period, how you earn, and any business costs you add) — processed in your browser only. So that you can share or bookmark a result, the page keeps them in its address after a "#" (for example keepvista.com/#amount=85000&…). Browsers never send that part of an address to a server: not when you open or reload the link, and not in the referring address sent with anything else the page loads. So the figures you enter do not reach our servers or our logs.
One exception, for older links: result links shared before 26 September 2026 used the form keepvista.com/?amount=…. Opening one of those still sends its figures to our CDN, in the requests that open the page, and our access logs (below) keep them for up to 30 days. The calculator converts such a link to the new form as soon as it opens, so nothing you do or share from there on carries the figures to us.
Before 26 September 2026 the calculator kept every result in that older form, so figures from results viewed before that date may still be in our access logs — in the address requested when a result link was opened or reloaded, and in the referring address of requests the page made — until those logs expire, at most 30 days later.
Stored on your device — your light/dark theme preference, in your browser's local storage, which never leaves your browser. If your browser installs KeepVista as an app, it also keeps an offline copy of the site's own files (the page, its script and styles) — nothing about you.
Usage measurement — our own, with no third-party analytics service. When you load a page or use a feature, your browser sends us an event with: the event name (for example "comparison completed"); the page path only — never the rest of the address, so never the figures in a result link; the referring website's domain; any campaign tags (utm) on the link you arrived on; and a few details about the action: which situation you chose, a coarse income band (such as "50–100k", never the figure), which country's breakdown or set-up link you opened, which options you switched on or off, and whether you arrived by opening a shared result link (yes or no — never its figures). Each event also carries a counter of how many times it has happened on the current page, which resets when you leave or reload. We add the time it arrived and the country, which our CDN derives from your IP address.
The event record itself carries no identifier, no IP address and no user-agent: apart from that country, our server reads the request's headers only to filter out automated and forged requests, and stores none of them. There are no cookies and no fingerprinting, and nothing is stored on your device for this. But the request that delivers an event passes through our CDN like every other request to the site, so the CDN's access log (next item) records that request, with your IP address, for 30 days. We do not combine the two.
Browsers sending Global Privacy Control or Do Not Track send no usage events; like every visitor's, their page requests still appear in the CDN access logs. The events are stored in our own AWS account in Frankfurt (eu-central-1) and kept for 12 months.
Server access logs. Our CDN records each request it serves — including the requests that deliver the usage events above — with the address asked for (the page path and any query string, such as the campaign tags on a link you arrived by; never the part after a "#", which your browser does not send), the time, the referring address your browser sends, your browser's user-agent, and your IP address. We use them to see which pages and campaigns bring visitors, to cross-check the usage measurement (they also count visitors whose browsers send no events), and to investigate errors and abuse. Our saved reports over them leave out IP addresses, and report results are deleted after 7 days. The logs are stored in our own AWS account in Frankfurt (eu-central-1) and automatically deleted after 30 days. They set no cookie and are not used to build a profile of you or to track you across other sites.
Email — if you write to us, we receive your email address and your message and use them only to answer you. Mail to keepvista.com addresses is forwarded to our mailbox by Cloudflare's email routing service.
Advertising (if enabled) — where display ads are shown, Google AdSense may set cookies and process data to serve ads. In the EEA/UK these are shown only with your consent via a consent banner, which you can change or withdraw at any time. See Google's ad policy.
Outbound links — the "set up" button under a result takes you to a third party that has its own privacy policy: for Estonia, Xolo (a partner we may earn a commission from if you sign up — this never costs you more); for the other countries, that country's official government business portal, from which we earn nothing.

Who processes it

Amazon Web Services hosts the site and runs our CDN (CloudFront), acting as our processor under the AWS Data Processing Addendum; any transfer of data outside the EU is covered by Standard Contractual Clauses and the EU-US Data Privacy Framework. Requests are served from the nearest CloudFront edge location, which may be outside the EU. The access logs and the usage events are stored in Frankfurt (eu-central-1). Cloudflare forwards email sent to our keepvista.com address (see Email above).

Legal bases (GDPR)

Usage measurement and server access logs rely on our legitimate interest (Art. 6(1)(f)) in understanding whether the tool is useful, which links bring people to it, and operating and securing the site. Answering your email relies on the same interest in responding to you. Advertising cookies (where used) rely on your consent.

Retention

We do not store your inputs — with the exceptions described above: the figures in an older ?amount= result link you open, and in results viewed before 26 September 2026, are in our server access logs until those logs are deleted. Usage events are kept for 12 months; an event record carries no identifier, IP address or user-agent. Server access logs, which include your IP address, are deleted automatically after 30 days.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction or portability, and you may object to processing. Contact contact@keepvista.com. You can also complain to the Romanian supervisory authority (ANSPDCP).

Changes

We may update this policy; the "last updated" date above will change accordingly.