Last updated: September 28, 2026 · Applies to riskrunway.app and the PauseCart browser extension
The short version: Privacy-first is the whole point of this product. Your financial numbers are calculated in your browser and stay there. The only exception is when you ask us to email you a report — then those figures are sent once to build that email and are not stored afterwards. The PauseCart extension also works entirely on your device unless you deliberately link it to a Risk Runway email, in which case your purchase decisions (item name, price, bought or held off) are synced to your own reports. No passwords, no advertising trackers, no data selling — ever.
1. Who we are
Risk Runway (riskrunway.app) is an independent financial-runway calculator, and PauseCart is its companion browser extension that helps you pause before impulse purchases. Contact: privacy@riskrunway.app.
2. The website (riskrunway.app)
What stays on your device
All calculator inputs (savings, expenses, income, age, debts) are processed locally in your browser and are never uploaded — with one exception. If you ask us to email you a report, the figures needed to build that report (savings, expenses, income, runway estimate) are sent to our server once, used to generate the email, and then discarded. They are not stored.
Your name, date of birth, account numbers, card details, employer, and address are never requested and never stored. The calculator does not have fields for them.
Local browser storage may remember your preferences so you don't re-enter data. You can clear it at any time via your browser settings.
What may reach our servers
Anonymous usage counters. We count basic events (page visits, report generations) in aggregate to understand overall usage. These counters contain no personal information.
Email delivery, only if you request it. If you ask us to email you a report or a reminder, we receive the email address you provide and use it solely to send what you asked for. We do not add you to marketing lists and we do not sell addresses.
The optional points program. If you join the points program (which unlocks the deep report in exchange for sharing), your email address becomes your account identifier so that your points survive a change of device. Alongside it we store a one-way digest of your registration IP — never the address itself — plus your points and share history. This is the only account record we hold.
AI reflection feature (opt-in). If you use the purchase-reflection feature, the text you choose to send is processed by an AI service to generate a coaching reply. It is not shared with anyone else.
Abuse prevention. To stop automated abuse of our forms and API endpoints, we count requests per visitor inside a short rolling window. That counter is keyed by a one-way digest of your IP address — never the address itself — and is deleted automatically within 48 hours.
Bot protection. Form submissions pass through Cloudflare Turnstile, a bot-detection service.
What we never do
No passwords. The only account record we hold is the one described above, and it is keyed to an email address rather than a login.
No user profiles, no behavioural profiling, no advertising audiences.
No Google Analytics, Facebook Pixel, or third-party advertising scripts.
We never sell, rent, or share your data with third parties for their own purposes. Ever.
3. The PauseCart extension
Your daily wage setting is stored only in your browser's local storage (chrome.storage.local).
Frozen item records (product name, price, URL, freeze timestamps) are stored only in your browser's local storage.
Usage statistics (number of pauses, freezes, skips) are stored only in your browser's local storage.
What is transmitted by default: only anonymous, aggregated counters — for example, how many times the checkout pause overlay was shown. No personal data, product details, prices, browsing history, or identifiers are included.
Optional Risk Runway sync (off by default): if — and only if — you enter your Risk Runway email in the popup, two extra things happen. Your email and an account reference are saved in the extension's local storage, and each purchase decision you make sends the item name, price, and what you decided (bought or held off) to riskrunway.app, so your decisions can appear in the reports you request there. Your savings, income, debts and daily wage are never sent. Turn sync off anytime with the Unbind button; the extension keeps working exactly as before.
Permissions:storage to save your settings locally; site access (content script) on shopping product pages (Amazon, eBay, Walmart) to read the product name and price so it can be displayed in the overlay. That information stays on your device unless you have turned on optional sync, in which case only the item name, price and your own decision are sent.
PauseCart sends data only to riskrunway.app (the same operator) and integrates with no other third-party services.
4. Data retention
How long we keep something depends on which of these it belongs to:
Your financial figures live only in your browser. Deleting your browser data (or uninstalling the extension) erases them completely.
A one-time report request — the email address is kept only long enough to deliver the report and is then removed. The figures used to build the email are never written to storage at all.
Your points account — kept while the account exists. Points balance, share history, email address and the one-way digest of your registration IP remain until you ask us to delete the account (see section 7), after which they are erased.
Anonymous counters — aggregate visit and usage counts with no identifier attached, together with a hashed IP marker used only to count unique visitors, which expires automatically after 30 days.
Your opt-out record — if you unsubscribe from runway updates, we store a one-way hash of your address so we know not to email you again. The stored value is a hash, not a readable email address, and it contains nothing else.
5. Service providers we use
We do not sell or rent data, and there are no advertising or analytics trackers on this site. A small number of infrastructure providers process data strictly on our instructions:
Cloudflare — hosting, edge network and bot protection. Processes requests and stores our counters and account records.
Resend — transactional email delivery. Receives the recipient address and the body of the email being sent.
DeepSeek — the AI service behind the optional purchase-reflection feature. Receives only the text you choose to submit for that reflection.
Each provider acts as our data processor under its own standard data-processing terms.
6. Where your data is stored
Our infrastructure runs on Cloudflare's global edge network, so records may be stored on servers outside your country of residence, including in the United States and the European Union. Where the law requires it, such transfers rely on the standard contractual clauses offered by our providers.
7. Your rights and how to use them
You can ask us to export or delete everything we hold about you. In practice that is a short list: your email address, the one-way digest of your registration IP, your points balance and your share history. Write to privacy@riskrunway.app and we will action the request within 30 days.
Because your financial figures are never stored on our side, there is nothing else for us to hand over or erase. Locally held data — calculator inputs, saved scenario, extension settings — is yours to clear at any time through your browser settings or by uninstalling the extension.
8. Voluntary feedback
If you use the optional feedback form on the homepage, only what you type is stored: your message and, if you provide one, your email address (used solely to reply). We do not store your IP address or browsing data with feedback submissions, and your calculator numbers are never included. Feedback is read by the site operator only and is never sold or shared.
9. Children
Neither the website nor the extension knowingly collects any personal data from anyone, including children.
10. Changes to this policy
If we change how data is handled (for example, if we ever add an optional cloud-sync feature), we will update this page and notify users through the site or the extension's update notes.
11. Contact
Questions or data requests: privacy@riskrunway.app