Back to home

Privacy Policy

Effective: October 7, 2026

Who is responsible for your information

PenaltyFreeRetire is a service operated by Alphashift (Pty) Ltd, trading as Moolman Institute, a South African private company with registration number 2016/495773/07. Alphashift (Pty) Ltd is the responsible party or controller for the personal information described in this policy. Our mailing address is PO Box 4863, Tyger Valley, 7536, Bellville, South Africa.

The site provides free online retirement calculators and educational content. You do not need an account to run a calculator or to save an anonymous scenario.

Information we collect

Calculator inputs

Calculator values stay in your browser's memory unless you choose "Save scenario." Unsaved values are not intentionally written to our application database.

If you save without an account, we place a random identifier in an essential, HTTP-only cookie and store that identifier with the scenario in Supabase. The cookie lasts for up to one year unless you clear it. We do not attach your name or email to an anonymous save, but the identifier and saved inputs are pseudonymous data. Clearing the cookie removes your ability to retrieve or delete those saves through the calculator; it does not immediately delete the server record.

Contact form

If you contact us, we collect your email, optional name, subject, message, timestamp, and an IP-derived hash. The hash supports rate limiting. We do not store the raw IP address in the contact record, but a hash is pseudonymous rather than necessarily anonymous.

Accounts and email

Supabase processes account identifiers, authentication data, and the date and version of your Terms acceptance so you can sign in and manage scenarios. If you request an emailed resource, we store your email, optional first name, signup source, requested resource, request time, age confirmation, and whether you separately opted into marketing. Resend delivers the requested email and any updates you chose to receive.

Cookies and optional tracking

We use essential browser storage for security, authentication, anonymous saves, rate limits, and your cookie choice. Optional services are controlled through the consent banner:

  • Analytics: Google Analytics 4 loads with analytics storage denied by default. Before you allow analytics cookies, it sends limited cookieless measurement pings and does not set or read Analytics cookies. Google may use those signals for aggregated behavioral modeling. If you allow analytics, Analytics cookies and standard measurement are enabled.
  • Advertising: Google AdSense ad units load only after you allow advertising cookies.

You can change these choices through "Cookie preferences" in the footer. If your browser sends a Global Privacy Control signal, we keep advertising cookies off even if an earlier cookie choice allowed them. The signal does not change your separate analytics choice.

Why and how we use information

  • provide calculators, accounts, emailed resources, and saved scenarios;
  • respond to messages and provide support;
  • record and honor marketing choices and opt-outs;
  • secure the service, prevent abuse, and diagnose failures;
  • measure use with consent-controlled analytics storage and display advertising only with the relevant consent; and
  • meet legal obligations and establish or defend legal claims.

Depending on the activity and applicable law, we rely on your consent, performance of a requested service or contract, compliance with legal obligations, and our legitimate interests in operating and securing a useful service. Where consent is the basis, you may withdraw it without affecting earlier lawful processing.

We do not sell personal information for money. Google Analytics may receive limited cookieless measurement signals while analytics storage is denied, as described above. Optional analytics cookies and advertising data are enabled only after the corresponding choice, subject to Global Privacy Control as described above.

Service providers and international processing

We use the following providers for defined operational purposes:

  • Supabase: authentication and database storage;
  • Resend: requested-resource delivery, contact notifications, and consented marketing email;
  • Google Analytics and Google AdSense: consent-controlled analytics, cookieless measurement, and advertising;
  • Sanity: blog content management; and
  • Vercel: site hosting and operational logs.

These providers may process information in South Africa, the United States, or other countries where they operate. We use contractual and other safeguards where applicable law requires them and remain responsible to the extent required by law. Each provider also publishes its own privacy information.

Retention and deletion

  • Unsaved calculator values end when the browser page state is discarded.
  • Anonymous saved scenarios are automatically deleted 12 months after their most recent update. You can delete them sooner while the browser identifier is still available.
  • Scenarios saved to an account remain until you delete them, the account is deleted, or a verified request or legal obligation requires action.
  • Contact submissions are automatically deleted after 24 months.
  • Guide-only email records are automatically deleted 90 days after the most recent guide request.
  • Active marketing records remain until you unsubscribe or make a verified deletion request.
  • After an unsubscribe, we keep a minimal suppression record so we can honor the opt-out.
  • Account and authentication data remain while the account is active and as reasonably needed for security or legal obligations.
  • Provider-generated analytics, advertising, hosting, and security logs follow the applicable provider and account settings.

Security

We use HTTPS in transit, access controls, row-level database security, and provider security features. Supabase encrypts database storage at rest. No online service can promise absolute security. We do not ask for financial account numbers or Social Security numbers through the calculators or forms.

Your choices and rights

Depending on where you live and which law applies, you may ask to access, correct, delete, restrict, object to, or obtain a copy of your personal information. You may withdraw consent and unsubscribe from marketing at any time. We may verify your identity before fulfilling a request. You may also complain to the South African Information Regulator or another competent privacy authority.

Use our contact form or email info@penaltyfreeretire.com to make a request. Providing the email used for an account, form, or subscription helps us locate the relevant record. For an anonymous scenario, submit the request from the same browser while its identifier cookie is still available whenever possible.

US state privacy disclosures

Some US state privacy laws provide rights such as access, correction, deletion, portability, and opting out of targeted advertising, sale, sharing, or certain profiling. Applicability depends on residence, statutory thresholds, and exemptions. We will not discriminate against you for exercising an applicable privacy right. If a law provides an appeal right and we deny your request, reply to our decision and state that you wish to appeal.

Do Not Sell or Share

We do not sell personal information for money. Keep advertising cookies off, withdraw consent through "Cookie preferences," or use Global Privacy Control to prevent optional advertising units from loading. You can also use Google Ads Settings. Contact us if you want to make a state-law request.

Children and age limits

The service is not directed to children, and we do not knowingly collect personal information from children under 13. Accounts and emailed resources are available only to people who confirm they are 18 or older. Contact us if you believe a child provided information.

Changes to this policy

We may update this policy prospectively. We will change the effective date and provide reasonable notice of material changes where required.

Contact us

Contact Alphashift (Pty) Ltd through our contact form, at info@penaltyfreeretire.com, or by mail at PO Box 4863, Tyger Valley, 7536, Bellville, South Africa.