Privacy

Last updated: 13 October 2026

Every number you type — your salary, your bonus, your family — is used by JavaScript running in your own browser tab and is never sent anywhere. There is no account, no database and no server-side calculation. Close the tab and it is gone.

How that is enforced rather than promised

The site is served with a Content-Security-Policy whose connect-src does not include this site itself. That means no fetch, XMLHttpRequest or beacon from this page can reach our server, which is how a calculator would send data if it sent any. form-action is 'none': no form here can submit to anything. You can read the policy in the _headers file of the repository, or see it in your browser's network tab on any response from this site.

To be exact about what a policy can and cannot do: it is not a proof. img-src allows images from this origin, and a request for an image is still a request — a careless script could put a number in a URL that way, and no policy would stop it. What the policy does is remove every destination that is not named in it, and make adding one a visible change to a file in the repository. The rest is the code being small enough to read.

Nothing is written to localStorage, sessionStorage, IndexedDB or a cookie by this site's own code.

A link to a calculator with your inputs in it (made with “Copy a link to these inputs”) carries them after the # in the address, which browsers do not send to any server — not ours and not Google Analytics; the page reads them in your browser and then takes them out of the address bar.

What is loaded from elsewhere

The pages, stylesheet, icons and scripts all come from this domain. Fonts are the ones already on your device; none are downloaded.

Google Analytics 4 is loaded on this site, yentake.tekiba.app, if and only if a measurement ID has been set in assets/config.js; copies of these pages anywhere else, including our own test and preview copies, load nothing. While that value is empty — as it is until the site's analytics property exists — no analytics script, cookie or request happens at all.

When it is set, it records the usual page-level things: the page you are on, the referrer, your device and browser, and an approximate location. Google derives that location from your IP address on arrival and, in GA4, does not store the address itself. Two things worth being straight about rather than reassuring about: your IP address is still sent to Google in order to be used that way, and GA4 sets a persistent identifier in a first-party cookie so that two visits from the same browser can be counted as one person. That identifier is not a name and we have no way to attach one to it, but it is not nothing either. A content blocker that refuses the Google script stops both, because then nothing is requested at all. Google’s own opt-out add-on is weaker than that: it stops the script reporting your activity, but the script is still fetched, and a cookie already set is not removed by installing it.

It also records a small number of named events so we can tell which parts of the site get used. Each carries only a fixed label from the list in brackets:

• a page view
• tool_result — that a calculator, or the checker in the year-end adjustment guide, showed a result after you changed something, once per visit to the page (which one: take-home, unemployment, childcare or year-end adjustment — never your answers)
• copy_result — that somebody copied the month-by-month table (which calculator)
• guide_to_tool — that a link from a guide to a calculator was followed (the guide's address and which calculator)
• affiliate_click — that a partner link was followed (which partner, and which page of this site it was on)
• ad_click — the same click on a card, told apart a little further (which link: Mobal’s SIM plans, Mobal’s eSIM plans or Wise; which page of this site; and where on the page the card sits: below the results, before the questions, or in the middle of a guide)
• tool_example — that a “Try an example” button was pressed (the example’s own name, never anything you typed)
• result_copy — that “Copy results” was used (which calculator — the copied text itself stays on your device)
• result_print — that “Print or save as PDF” was pressed (which calculator)
• embed_view — that a calculator was opened inside another site (which calculator, and that site’s host name, such as example.com — not the page’s address and nothing typed; see embedding)
• share_link — that “Copy a link to these inputs” was used (which calculator — the link itself, which holds the inputs, stays on your device)

None of those events carry an amount, a salary, a date of arrival or anything else you typed — that is the part this site controls, and it is absolute. Google's own handling of the data it collects is described in Google's privacy policy, and you can switch it off for every site with the Google Analytics opt-out add-on or any content blocker.

Advertising

The page reserves the space for one advertisement, and at the time of writing loads nothing into it: no ad script, no ad network, no ad cookie. An application has been made, so this may change; when it does, this page will say which network it is and what it sets, and the Content-Security-Policy in _headers will have to name the network's hosts before the browser allows them, which is a change you could see in the repository.

Affiliate links

A few pages have room for one card with an affiliate link, labelled “Ad / 広告”. The card is text drawn by this site’s own script: showing it loads nothing from the partner and sends nothing to it. Only if you follow the link does your browser go to the partner’s site — for Mobal, mobal.com (including partners.mobal.com), and for Wise, wise.com — in a new tab, and from then on that site’s own privacy policy applies, including any cookie it sets to record that you came from here. The link tells the partner that you came from this site, and carries nothing you typed. Until a partner approves the site, no card is shown at all.

Hosting logs

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare's edge records requests it serves — the URL, the time, your IP address, your user agent — for delivery, caching and abuse prevention. Those logs are Cloudflare's, are not joined to anything we hold, and contain nothing you typed into the calculator, because none of it is ever sent.

Who runs this

YenTake is made by Tekiba, which builds small tools that run in the browser. Questions and corrections, including anything wrong on this page: hello@tekiba.app.