Privacy
Your data never leaves your browser.
Harbor does all of its math in your browser. The numbers you type — your income, your account balances, your Social Security, your spending — are never sent to us, never stored on a server, and never shared with anyone. There is no account to create and nothing to sign up for.
What stays on your device
Harbor saves your work-in-progress scenario in your browser's local storage so that refreshing the page or coming back later doesn't erase what you entered. That saved scenario lives on your own computer, in your own browser. We cannot read it. Clearing your browser's site data for harborcalc.com deletes it. Using a private/incognito window means it disappears when you close the window.
If you're using a shared or public computer, that's worth knowing: the next person to open Harbor in the same browser profile would see the scenario you left behind. Click "Clear my data" in the top bar before you go — it removes the saved scenario immediately. You can also clear your browser's site data for harborcalc.com, or use a private window, to the same effect.
Cookies and tracking
Harbor sets no cookies. It loads no third-party scripts — no Google Analytics, no advertising pixels, no social media widgets, no external fonts. Nothing on this site tracks you across other sites, because there is nothing here to do the tracking.
Harbor does send our own server a small, anonymous signal when you reach a step or click a link — for example, that the homepage or a calculator's landing page was visited, that a link into a calculator was clicked, that the Review step was reached, or that a "have this reviewed" link was clicked. These signals are how we count how the tool is used. They contain none of the numbers you enter, no cookies, and no identifier, and your IP address is not stored. They are short, non-personal markers, not a record of you.
If you reached Harbor through a link we shared with a publisher or partner, that link may include a short campaign code — chosen by us from a fixed list — that we record with the usage signal so we know which resource referred you. The code identifies the referring link, not you: it carries nothing you enter and no personal information.
Along with that signal, Harbor also records which website referred your visit. For a known site — a search engine or a large social platform — it stores a short name from a fixed list. For any other site it stores the site's domain name only, never the page address or anything after it. This tells us which site sent you, not who you are.
That's also why you haven't seen a cookie consent banner: there are no cookies to consent to.
What our web host records
Like any website, Harbor is served by a hosting provider, and that provider records standard web-server request information: the IP address a request came from, the time, the page requested, and the browser's user-agent string. This is a byproduct of delivering the page to you, it's kept for operational and security purposes, and it is not connected to anything you enter into the tool — the tool never sends us that data in the first place.
Files you create
The CSV downloads and the printed/PDF plan are generated on your computer and saved wherever you tell your browser to put them. They never pass through us.
Children
Harbor is not directed at children under 13, and we do not knowingly collect information from anyone under 13. Because nothing you enter is ever transmitted to us, there is nothing to collect in the first place.
Your rights
Data-protection laws such as the GDPR and the CCPA give you rights to access, correct, or delete personal information a company holds about you. In Harbor's case there is nothing to request: we hold no personal information about you, because none is ever transmitted to us. Your data is already entirely in your own hands — deleting it means clearing your browser's storage for this site.
The anonymous interaction counts described above are stored in a third-party database (a data processor we use). They hold no personal information — no cookies, no identifier, and no IP address — only that an anonymous, aggregate interaction happened, sometimes alongside the campaign code and the referring site's name or domain described above. That referring domain is the name of the site that sent you, not the page you came from and not anything about you; it still carries no identifier and no IP address. Nothing you enter into the planner is ever among them.
If this changes
If Harbor ever adds analytics, a server-side feature, or anything else that changes what happens to your data, this page will be updated to say so before that change ships, and the date below will change.
Last updated: August 24, 2026.