WorthlineWorthlineLast updated: July 25, 2026
Worthline is built solo, in public, by one person — not a company with a data-monetization team. This policy explains, in plain language, exactly what we collect, why, and what control you have over it. If anything here is unclear, just ask.
Worthline ("we", "us", "Worthline") is a personal-finance calculator and anonymous wealth-comparison tool, operated as an independent, solo project. This policy applies to worthline.io and every page and feature on it, including the ledger calculator, the account area, and the live map.
We are the "data controller" (under GDPR terminology) for the personal data described below.
We collect different data depending on how you use Worthline. Here's the complete list — nothing more is collected than what's shown here.
Nothing leaves your browser. The numbers you type into the ledger (cash, investments, property, debts, age, country) are stored only in your browser's local storage, temporarily, so the form doesn't reset if you reload the page. We never see these numbers on our servers unless you explicitly choose to save a ledger to an account or opt into the map.
| Data | Why we collect it |
|---|---|
| Name | Displayed on your account and, if you choose, on shareable result cards. |
| Email address | Login, password resets, and account-security notices (like a new sign-in alert). |
| Password (hashed) | We never store your actual password — only a one-way cryptographic hash. We cannot see or recover it. |
| Username | Used for your public profile link and invite links you share. |
| Avatar (color or Google photo) | Shown on your account and, optionally, invite pages. |
| X (Twitter) handle (optional) | Only shown on cards you choose to share — never used for anything else. |
If you save a ledger, we store: cash, investments, property value, debts, calculated net worth, country, region, age, annual expenses, average debt interest rate, and your self-reported "vibe" (behind / on track / comfortable). This is the actual financial data our core feature exists to analyze — we treat it as sensitive and never sell or advertise against it.
When you log in, we store your session (via a secure cookie), your IP address, and browser/device identifier (user agent) — solely to detect suspicious logins and let you stay signed in. Session records are tied to login events, not to your browsing activity elsewhere.
Our contact form collects your name, email, subject, and message, plus a Google reCAPTCHA response used purely for spam prevention. We use this only to reply to you.
We do not sell your personal data, and we do not use it to serve targeted advertising, because Worthline doesn't run ads.
The map is opt-in. If you check "I want to appear on the map" when saving a ledger, your net worth, country, region, and vibe are added to a regional aggregate.
You can remove yourself from the map at any time from your account settings, without deleting your saved ledger history.
The separate "Paint the Map" feature lets you leave a public, anonymous opinion pin (e.g. "good for investment") about a location. These pins show your general opinion only — never your identity to other users, though we retain an internal link to your account to prevent abuse and to let you erase your own pins later.
We use a small number of strictly necessary cookies — no advertising or cross-site tracking cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| wl_access_token | Keeps you signed in for API requests. HttpOnly — inaccessible to JavaScript. | 15 minutes |
| wl_refresh_token | Silently renews your session without asking you to log in again. | 30 days |
We also use your browser's local storage (not a cookie, and never sent to our servers) to temporarily hold un-saved calculator inputs, your last few net-worth checks for trend comparisons, and which map regions you've already seen unlock — all of which you can clear anytime via your browser settings.
If you choose "Continue with Google," we receive your name, email address, and profile photo from Google, used solely to create or log you into your Worthline account. We never receive your Google password, and we don't access your Gmail, Drive, or any other Google service. You can review or revoke Worthline's access anytime from your Google Account permissions page.
Founding Members can request a personalized written insight about their financial trajectory. To generate it, we send a limited, purpose-built summary — your regional percentile, ledger history over time, and any goals you've set — to an AI model provider (OpenAI) for a single, one-off completion. This request is not used by the provider to train their models, per their API data-usage terms at the time of writing. We cache the resulting text on our own servers to limit how often this data is sent.
If you upgrade to a paid Founding Member plan, your payment is processed by a third-party payment processor. We do not receive, see, or store your full card number — only a payment confirmation and subscription status. Refer to your payment provider's own privacy policy for how they handle your card details.
We share data only with the specific service providers needed to run Worthline, each bound to use it solely for that purpose:
We do not sell personal data to anyone, and we do not share individual ledger entries publicly under any circumstance — only aggregated, k-anonymous regional data, as described in Section 4.
We may disclose information if legally required to (e.g. a valid court order), or to protect the security of the service against fraud or abuse.
We apply industry-standard safeguards: passwords are hashed (never stored in plain text), session tokens are HttpOnly and transmitted only over HTTPS, sensitive endpoints are rate-limited against brute-force and bot abuse, and automated bot-behavior detection can suspend accounts that show clearly non-human usage patterns. No system is perfectly secure, but we treat your financial data with the same care we'd want for our own.
Depending on where you live, you may have the right to:
To exercise any of these rights, contact us — we reply personally, usually within a day or two.
Worthline is not directed at, and is not intended for use by, anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Because our service providers (hosting, email, AI, payments) may process data in countries other than your own, your data may be transferred internationally. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses with these providers.
If we make material changes to this policy, we'll update the "Last updated" date at the top of this page and, for significant changes, notify active accounts via the in-app notification system.
Worthline is built and operated by one person. For any privacy question, data request, or concern, reach out directly — every message is read personally.
Reach out any time — you'll hear back from a real person, not a support queue.