This policy applies to howloop.how. It describes the current calculator implementation and the advertising features that may be enabled later.
Calculator inputs
Calculations run in your browser. The website does not send the amounts you enter to Howloop or to a bank. We do not ask for bank logins or connect to financial accounts. The bank picker downloads public product snapshots hosted on this site.
Saving on your device
When you choose another language, the basic calculators temporarily carry valid inputs to that language page using this tab’s session storage. The new page reads and removes the temporary copy; copies older than 30 minutes are ignored. Amounts are not placed in the URL or sent to a translation service. Use the clear-inputs button on a language page to reset the current entries.
Choosing “Explore my savings plan” on the home page temporarily carries your inputs to the full calculator using this tab’s session storage. The calculator removes that temporary copy when it opens. Copies older than 30 minutes are ignored, and the inputs are not placed in the URL or sent to analytics.
Choosing “Save on this device” writes your calculator inputs and selected product to local storage in that browser. They remain there until you choose “Clear saved plan” or clear site data. Anyone with access to that browser profile may be able to view saved inputs. A downloaded CSV is a file on your device; manage or delete it using your device’s file controls.
Tax return companion
The guided tax checklist and expense organiser runs on your device. It does not send your checklist, expense amounts or descriptions to Howloop, the ATO or an AI service. Unless you choose “Save on this device”, leaving or refreshing clears the working checklist. Saving keeps your selected answers, added expenses and unfinished expense in this browser’s local storage. It is not encrypted storage or a backup account: anyone with access to the browser profile can restore it. Use “Delete saved checklist” or clear site data to remove it. Changes are not saved automatically. Downloads are files on your device. We do not request TFNs, identity documents or myGov credentials.
If optional AI explanations are enabled, the clearly labelled panel asks for consent before sending a general question and selected topic through our hosting provider to OpenAI. Checklist selections are not sent. Enabling that panel loads Cloudflare Turnstile to protect the service, which processes technical browser and connection information. Do not include personal or financial information in a question. Howloop does not store questions in an application database and requests OpenAI responses with storage disabled; infrastructure and provider security retention may still apply. See OpenAI API data controls and Cloudflare’s privacy policy. The guided flow remains available without AI.
Site requests and email
The hosting provider processes ordinary connection information such as IP address, request time, browser details and the page requested to deliver and protect the site. If you email us, your email provider and ours process the message and we receive what you choose to send. Avoid sending sensitive financial or identity information. Contact us to ask about correspondence you have sent.
Fonts and external links
We load the DM Sans typeface from Google Fonts. The request may disclose your IP address and technical request information to Google. Links to banks, government resources and other websites take you to services with their own privacy policies.
Site measurement
Our hosting setup includes a Cloudflare Insights beacon for site traffic and performance measurement. It can report page visits, referral information and technical measurements such as page-loading performance. Cloudflare documents its Web Analytics service as not collecting or using visitors’ personal data. We do not attach calculator amounts, tax checklist answers or expense descriptions to analytics events. Do not put personal information in page URLs.
Read Cloudflare’s analytics explanation and Cloudflare’s privacy policy. Page measurement is separate from saving a calculator or checklist on your device.
Cookies and advertising
The current release does not load advertising scripts. Cloudflare’s measurement beacon is present on this site; the measurement details are described above. Saved plans use local storage only when you choose to save. We may introduce Google AdSense after completing account and site setup.
If Google ads are enabled, Google and other advertising vendors may use cookies to serve ads based on visits to this and other websites. Google’s advertising cookies can support personalised ads. You can manage personalisation at Google Ads Settings and find third-party choices at YourAdChoices. Read how Google uses information from partner sites.
Before advertising is enabled, this policy and the site’s consent controls must reflect the actual setup. Applicable regional consent requirements, including Google’s certified consent-platform requirements for relevant European traffic, need to be configured by the site operator.
Contact and changes
For privacy questions or requests about correspondence, email [email protected]. Browser-stored calculator inputs can be removed directly on your device. This policy will be updated when the site’s data practices change.