Privacy

What we collect, why, and what we never do.

Last updated 2026-08-13.

This page describes what Compounding Estates actually does today, not a generic template. If a section below doesn't apply to a feature yet (like email signup), it says so plainly rather than describing something that doesn't exist.

Calculators and market pages

Every calculator and market page works with no account. The numbers you type into a calculator (purchase price, rent, rate, and every other financial input) are computed entirely in your browser and are never submitted to us, unless you explicitly choose to save an analysis (see "Optional account" below) or share a result via a URL you generate and send yourself. Loading any page still means your browser makes an ordinary web request to our host, Cloudflare; see "Hosting and aggregate analytics" below for what that involves.

Hosting and aggregate analytics

This site is served by Cloudflare, and Cloudflare Web Analytics is currently active. It gives us aggregate page-view and performance metrics (which pages get visited, how fast they load) without cookies or tracking you individually across other websites. This is separate from the site's own custom analytics library described below, and its Do Not Track / Global Privacy Control behavior has not been independently verified on our end: treat Cloudflare's own privacy documentation as the source of truth for how their product handles those signals.

Contact form

The contact form (/contact) sends your message, name, and email to our inbox via Resend, a transactional email provider, so we can reply. Nothing you submit through the contact form is added to a mailing list or stored in a database. If Resend's delivery attempt fails, our server logs only the HTTP status code of that failure: never the response body, which could otherwise echo back parts of what you submitted.

Optional account

Creating an account is never required to use any calculator or market page. If you do create one, we store your email and a salted, hashed password (never the password itself; session tokens are also stored hashed, not in plain form), plus whatever you choose to save: analyses, tracked properties, saved markets, saved ZIP-market watchlist (the five-digit ZIP Code areas you choose to watch, and whether you mark one as watching or owning; no ZIP-market financial assumptions are stored), display preferences. This data is used only to show it back to you when you're logged in. Signing up or logging in also writes a rate-limit record (your email, IP address, the attempt type, and a timestamp) used solely to slow down automated abuse of the login form; it is not used for marketing or profiling. You can delete individual saved items (an analysis, a tracked property, a saved market, a saved ZIP Code) yourself from the account or property-tracker pages at any time. There is currently no self-service "delete my entire account" button; email us (below) and we'll delete your account and associated data by hand. We're honest that this is a manual process today, not an instant automated one.

Custom analytics library

Separately from Cloudflare Web Analytics above, this site has its own privacy-conscious analytics library that can record structural, non-identifying events (like "a market page was viewed" or "a calculator produced a result"): never your calculator inputs, never free text you typed, never an email address, never anything that could identify you individually. The full list of what it can and cannot ever send is public: the code itself. As of this writing, this library is not connected to any analytics provider: no event from it is transmitted anywhere. This page will be updated first if that changes, and the library automatically stops entirely if your browser sends a Do Not Track or Global Privacy Control signal: that specific guarantee applies to this custom library only, not to Cloudflare Web Analytics above.

Email signup

We're building an optional email signup for people who want to hear about new market research or meaningful data updates. As of this writing, signup is not open: no form is visible on the site, and any request sent directly to the signup endpoint is rejected as not yet configured; no address is stored or sent anywhere. If a bot fills in the form's hidden spam-trap field, the endpoint deliberately returns a fake success response to that request specifically, without storing or sending anything (a standard anti-spam technique, not a real signup path). When signup does open: it will use double opt-in (you confirm via a link in an email before anything else happens), every email will include an unsubscribe link, and we will never sell, rent, or share your address with anyone outside the email service we use to send it.

What we never do

  • We never sell or rent your information to anyone.
  • We never track you across other websites.
  • We never use tracking pixels in email.
  • We never put your calculator inputs, submitted message text, or email address in a URL or in our custom analytics events. Our contact-form error logs are limited to HTTP status codes, not response bodies. Our own login rate-limit records do intentionally store your email and IP address, as described above: that one exception is spelled out precisely rather than covered by a blanket "never."

Questions or deletion requests

Email us and we'll help, including manually deleting your account and everything associated with it, or removing you from any list you're on. This is a real request we handle by hand, not an automated guarantee of instant deletion.


Questions or a correction? Send a message.