Legal
Privacy policy
Last updated: November 2, 2026
Your choice comes first
You can read guides, use financial tools and download templates without an account or optional analytics. Optional analytics and advertising are off until you choose them. Reading or accepting this policy does not give permission for optional tracking. The first-visit banner offers Accept, Reject and Customize. Accept allows optional analytics and advertising; Reject keeps both off. Customize lets you choose each separately.
Use here or in the footer to change or withdraw permission at any time. Rejecting analytics also stops visitor alerts to the site owner. We respect Do Not Track and Global Privacy Control by suppressing optional analytics and advertising. A previous permission for owner alerts alone does not grant permission for Google Analytics or advertising.
Essential storage and private financial inputs
Essential storage supports your privacy preferences, appearance settings and secure admin sign-in. The privacy preference cookie (bt_privacy) and a browser-local copy hold category choices, their version and the time you chose them. A choice is valid for 180 days and is remembered on later visits without asking again; the cookie expires then, while an inactive local copy can remain until replaced or cleared. Neither holds a visitor identifier. When that choice expires, optional tracking stops and we ask again.
Financial templates can save your entries in your own browser so you can return to them. Calculations and exports run locally. Template and calculator inputs are never included in analytics or Telegram messages. Templates, tools, calculators, contact forms, search pages and admin pages do not load optional measurement SDKs. Changing privacy preferences does not clear your saved financial templates.
Optional analytics
- First-party article attribution. With analytics permission, an anonymous first-party identifier (
bt_anon, normally up to 180 days) helps deduplicate Pinterest-attributed article views, engagement and scroll-depth events. We record the public article path and source-bound Pin identity, not financial input values or full URLs. Event records older than 180 days are routinely pruned. - Visitor alerts through Telegram. When enabled by the site owner and allowed by your analytics preference, public reading-page visits may notify the owner privately in Telegram. Messages include the public page title and path, UTC time, approximate country, device category and an available coarse referring domain or labelled link source. Country comes from Cloudflare's country header through our verified proxy; unavailable country is reported as unavailable. We do not request location access or infer whether you are a new or returning person.
- Alert deduplication and retention. A random browser-tab session expires after 30 minutes without activity. The normal mode sends one alert per session; optional per-page mode sends at most one per public path in that session. Server delivery identifiers are hashes used for deduplication. Completed delivery records and diagnostics are routinely removed once older than 30 days. No IP address, cookie value, session identifier, financial input, sensitive URL parameter or full user-agent appears in a Telegram message. Telegram processes messages under its own privacy policy.
- Google Analytics. If configured by the site owner, Google Analytics loads only after analytics permission, on eligible reading pages. We supply page locations without query strings or fragments and coarse referrer information, rather than your tool inputs. Google may use its own cookies (
_ga*) and process network metadata under its privacy policy. Its retention and processing are governed by the configured Google service.
Optional advertising
Advertising has a separate, off-by-default preference. Where configured, Google AdSense may load after advertising permission. Accepting analytics alone does not enable ads. Google and its advertising partners may use cookies to serve and measure ads based on visits to this site and other websites. You can manage personalized advertising in Google My Ad Center. Read about Google advertising and cookies. Rejecting advertising never prevents access to guides or tools. Disabling a preference stops new optional collection; information previously received by a provider is subject to that provider's retention rules.
Site delivery, security and our Pinterest account
Our hosting and Cloudflare services process request metadata for delivery and security, separately from optional browser analytics. The edge-injected Cloudflare Web Analytics script is blocked by our page security policy. Ordinary operational logs may contain IP and request information and are kept with bounded log rotation. They are not Telegram visitor messages.
Our official Pinterest API connection reads our own account, board and Pin performance data for the operator. Its OAuth credentials are encrypted on the server and are never part of visitor messages or browser configuration. This account integration is separate from optional Pinterest advertising tags on public pages.
Contact and withdrawal
If you contact us, the form stores your name, email address and message in a private operator log so the owner can review and respond. The form does not automatically send an email. We use that information to handle your request. For questions or requests about data already held, write to hello@budgettrellis.com. Privacy preferences stop future optional collection; they do not automatically erase records already collected. Your available rights depend on your jurisdiction. This page describes the implementation and does not claim a jurisdiction-specific legal compliance review.