Privacy Policy
Last updated: 2026-09-25
This notice explains how NZTaxTools ("we", "us", "the site") handles personal information. It is written to meet the requirements of the New Zealand Privacy Act 2020 and the thirteen Information Privacy Principles (IPPs) administered by the Office of the Privacy Commissioner (OPC).
1. What we collect
- Calculator inputs — salary, tax code, KiwiSaver rate, student-loan balance, etc. These never leave your browser. They are stored in the URL (so results can be shared) and may be persisted in
localStorageon your device. We do not receive, transmit, or log them on any server. - Analytics — Google Analytics 4 collects anonymised usage data (pages viewed, referrer, device type, country/region from IP, session duration). See section 3.
- Advertising — Mediavine and its advertising partners may set cookies to deliver and measure ads. See section 4.
- Error diagnostics — if a page's JavaScript fails, a technical error report (the error message, the page URL, browser and OS version) is sent to Sentry so we can fix it. It carries no calculator inputs, sets no cookies, and we do not ask Sentry to store your IP address. Sentry's processing is governed by its Privacy Policy.
- Server logs — our host (Cloudflare Pages) logs request metadata (IP, user-agent, referer, timestamp) for up to 30 days for abuse prevention and debugging.
2. Consent and controls
We do not run a consent step of our own: analytics cookies are set as soon as you arrive. Where Mediavine, our advertising partner, shows its consent banner — in regions covered by the GDPR, UK GDPR, or similar consent laws — you can accept or reject personalised advertising there, and change that choice at any time from the privacy link in it; see section 4. Everywhere else, the control that governs what is stored on your device is your browser's cookie settings.
3. Google Analytics 4
We use Google Analytics 4 (property G-21W2V2BYYZ) to understand aggregate usage. Analytics
cookies load on your first pageview, with no prior acceptance step. IP addresses are truncated by Google before logging. GA4 data
retention is set to the minimum available (2 months event, 14 months user-level). We do not
cross-reference analytics data with any named individual. Google's processing is governed by its
Privacy Policy.
4. Advertising
This site is funded by advertising. We work with Mediavine, an advertising partner that serves and measures the ads on our pages. Mediavine and its advertising partners may use cookies, device identifiers and similar technologies to deliver ads, limit how often you see the same ad, and measure whether an ad was seen.
Those partners may process your IP address, browser and device type, approximate location and your interactions with ads, each under its own privacy policy. Mediavine's policy is at mediavine.com/privacy-policy, and the current list of partners is available from its consent banner where that banner is shown.
Where Mediavine shows its consent banner, it asks you to accept or reject personalised advertising before an advertising cookie is set, and personalised ads are not enabled unless you consent to them. You can change or withdraw that choice at any time from the privacy link in the banner. You can also opt out of third-party vendor cookies more broadly at youradchoices.com.
5. Cookies
A full list of cookies — name, provider, purpose, and duration — is on our Cookie Policy page.
6. Your rights under the Privacy Act 2020
Under the Privacy Act 2020 you have the right to:
- access personal information we hold about you (IPP 6);
- request correction of inaccurate information (IPP 7);
- know the purposes for which information is collected (IPP 3);
- expect secure storage and limited retention (IPPs 5 and 9);
- be notified of notifiable privacy breaches (Part 6 of the Act).
Given that calculator inputs never leave your browser, and that analytics and advertising cookies can be controlled at any time through your browser settings, much of the exercise of these rights is self-service.
7. Complaints
If you are not satisfied with how a privacy matter has been handled, you can lodge a complaint with the Office of the Privacy Commissioner (privacy.org.nz, 0800 803 909).
8. International transfers
Analytics data is processed by Google, and advertising data by Mediavine and its advertising partners, primarily in the United States. Section 11 of the Privacy Act 2020 governs cross-border disclosure; each provider's policy describes the protections it applies.
9. Children
NZTaxTools is not directed at children under 13. We do not knowingly collect information from children.
10. Changes to this policy
We may update this policy to reflect changes in our practices, hosting, or applicable law. The "Last updated" date at the top indicates the most recent revision.