Privacy.
Your transcript is read in your browser and never uploaded. Here is everything else.
Your transcript
The PDF or pasted text is read in your browser. Only transaction codes, the number of days between them, the cycle code and a refund size band go into the address of your result page, and the page is computed from those. Names, SSNs, addresses and amounts never leave your device.
Calculators
The numbers you enter in a calculator are sent with the page request so the result can be calculated, and are not stored. Pages with your tax answers or transcript show no ads and load no analytics.
What you choose to share
If you press "Share anonymously", the timeline shown to you on the page is stored, with an anti-abuse trust weight and a device key that changes every month (a keyed hash of a random cookie id). If you report a phone call or a state refund, those answers are stored the same way. IP addresses are used only in memory, to rate-limit and score the request, and are not stored.
Cookies
One first-party cookie with a random id, used only to keep one timeline per device and to limit abuse. On reference and calculator pages, Google AdSense and Google Analytics may set their own cookies once ads are enabled; they never load on pages with your own data.
Hosting
The site runs on Cloudflare Workers. Cloudflare processes requests to deliver the site.