Who processes your data
The data controller is Sandy Bradbury, an individual resident in Spain and the owner of compoundingjourney.com. Write to me through the contact form about anything on this page, including to exercise your rights. It is the only way to reach me from this site: no email address is published here, and form messages arrive in a single inbox.
There is no data protection officer: one person runs this site, and none of the processing described here requires appointing one.
What is processed, at a glance
| What is collected | What for | Legal basis | Kept for |
|---|---|---|---|
| Name, email and message from the contact form | Answering you | Your consent in sending the form, and the pre-contractual relationship you asked for | 24 months from the last message |
| Display name and score in the simulator leaderboards | Publishing the ranking you chose to submit | Your consent in pressing "submit score" | Until you ask for it to be removed |
| The settings and the result of a simulation (figures, percentages and options chosen) | Publishing aggregate averages and shares on the data page | Your consent in pressing the button that saves the simulation | Indefinitely, in aggregate and with no name |
| How many times each article is opened | Deciding what to feature | Legitimate interest in knowing what is read | One aggregate counter per article per month, indefinitely |
| IP address and technical request data | Serving the page, rate-limiting abuse, logging faults | Legitimate interest in keeping the service up | The hosting provider's logs, days |
The contact form
The form asks for your name, your email address and your message. It is submitted to Netlify Forms, stored there, and forwarded to me by email. It is not used to send you anything you did not ask for, it is not shared, and it does not feed a mailing list: subscribing to the newsletter is a separate, deliberate act.
The simulators and the public data
Three of the simulators keep a public leaderboard. If you press the button to submit your score, the display name you typed, the score, the page's language, the date and the settings you ran that simulation with are stored, and the leaderboard row is visible to everyone. None of this happens until you press it: the simulators work perfectly well without submitting anything.
The other two — the Freedom Calendar and the Market Time Machine — have no leaderboard, but they do have a button that adds your simulation to the public data. No name is stored there: only the figures you entered, the options you picked and the result that came out.
"The settings of the simulation" means things like the withdrawal rate, the share of stocks and bonds in the portfolio, the starting age, the horizon in years, or which habits you cut. They are the model's numbers, not data about you: no address, no occupation, no real net worth, nothing a form would ask for. What gets published from them is averages and shares on the data page, and no measure appears until its sample is large enough - precisely so that no figure describes a single simulation.
The rows stored without a name carry no identifier at all, which means they cannot be found again afterwards: there is no way to tell which one was yours, for me or for anybody else. That is what makes them anonymous, and it also means a particular row cannot be deleted on request. The leaderboard is different: there is a display name there, and it can be removed.
You choose the display name, and the sensible choice is not your real one. A nickname does the same job. If you submitted one and want it gone, write through the contact form naming the score and the simulator, and it will be deleted.
The reading counter
Opening an article adds one to a counter. That counter holds a number per article per month and nothing else: no cookie, no identifier, no browser fingerprint, no record of who read what. It is what decides which article the blog features.
Storage in your browser, and why there is no cookie banner
This site uses no cookies — not its own, not anyone else's, none for analytics and none for advertising. That is why you are not asked to accept anything: there is nothing to consent to.
It does use four local-storage keys, which stay in your browser and are never sent anywhere:
preferredLanguage— the language you chose, so you are not asked twice.languageSuggestionDismissed— that you already dismissed the language prompt.preferredCalculatorCurrency— the currency you want the calculators in.cj:simulator:contextandcj:leaderboard:mine:*— which simulator you came from, and which leaderboard rows are yours so they can be marked. These two are cleared when you close the tab.
You can delete them from your browser whenever you like. The site keeps working; it just stops remembering your preferences.
Who else sees your data
- Netlify (Netlify, Inc.) hosts the site, processes the form, and runs the database holding the simulations, the scores and the counters. It acts as a data processor.
- Nobody else. Loading a page here contacts no third party: the fonts, the charts and the scripts are all served from this domain. There is no Google Analytics, no pixel, and no social button that follows you.
The newsletter and the share buttons
Newsletter sign-up does not happen here: the link takes you to the provider's own form (MailerLite for Spanish and Portuguese, Substack for English), and from that point they process your address under their own policy. This site never receives it.
The share buttons on the articles are ordinary links. They load nothing from those networks and tell them nothing about your visit: they only open when you press them.
International transfers
Netlify, Inc. and Substack are in the United States, so data they process may leave the European Economic Area. Those transfers rely on the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses, depending on the provider.
Your rights
You can ask me at any time for access to your data, its correction or erasure, the restriction of or objection to its processing, and its portability, and you can withdraw your consent whenever you like. Write through the contact form and I will answer within one month.
If you think I handled that badly, you can complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, which is the supervisory authority for this site.
Children
This site is not aimed at children under 14 and does not knowingly collect data from anyone that age. If you believe it has, write to me and it will be deleted.
Changes
If any of the above changes, this page changes with it, along with the revision date at the top. Changes affecting processing based on your consent do not apply to what was already collected without asking you again.