Privacy policy
Last updated 4 September 2026
Holdeta is built so that there is almost nothing to write a privacy policy about. Here is the complete picture.
Who operates this site
The controller for any personal data mentioned on this page is the operator identified on the imprint, the single authoritative record of operator identity, correspondence address and VAT details for this site. Contact for anything in this policy: hello@plainforge.com. Holdeta is part of plainforge.
What the estimator does with your data
Everything you enter (dates, amounts, card network, country) is processed by JavaScript running in your browser and is never transmitted anywhere. There is no backend, no database, no account system. Estimates exist only on your screen; the shareable link encodes your inputs in the URL fragment (the part after #), which browsers do not send to servers.
What we don't do
- No cookies. None. So no cookie banner.
- No accounts, no forms, no newsletters.
- No advertising identifiers, no fingerprinting, no social pixels.
- No sale or sharing of personal data: we don't hold any to sell.
Server logs
Our hosting provider (Hostinger) keeps standard, short-lived technical logs (IP address, requested URL, user agent) for security and operations, as virtually all web hosts do. We don't use these to identify visitors. Legal basis: our legitimate interest in running a secure, working website (GDPR article 6(1)(f)). Retention: the short technical period Hostinger keeps such logs; we hold no copy.
Who processes data on our behalf
The site is hosted by Hostinger (Hostinger International Ltd, Cyprus, with Hostinger UAB, Vilnius, in its group), which acts as our processor under GDPR article 28. Where Hostinger moves data outside the European Economic Area it relies on the European Commission's standard contractual clauses (checked on Hostinger's privacy policy, 31 August 2026). No other company processes data for this site.
Analytics
If we measure traffic, we use Cloudflare Web Analytics, a cookieless, privacy-first counter that does not track you across sites, does not use identifiers, and does not profile you. It tells us "this page was viewed," not who you are.
Partner links
Some guides, and the estimator's result panel, contain clearly labelled partner links: Discover Cars in the car rental deposits guide and under a finished estimate for a car rental; Monzo in the debit vs credit guide; and Current in the debit vs credit guide and under a finished estimate for a debit card issued in the United States. On this site they are plain outbound links: no affiliate scripts, pixels or cookies run here, and nothing about you is collected when the page loads. If you click one, you leave this site. The Discover Cars link goes to Discover Cars directly. The Monzo and Current links go first to the Takeads affiliate network (tatrck.com), which records the click and forwards you to the partner. Each of those sites sets its own cookies and processes your data under its own privacy policy. The link address includes a tag identifying holdeta as the referrer and, for the network links, which page the link was on; it carries no information about you.
If you email hello@plainforge.com, we receive your address and message and use them only to reply. Mail is handled by our email provider under their own security terms. Legal basis: our legitimate interest in answering the people who write to us (GDPR article 6(1)(f)). Retention: as long as the conversation needs, then it is deleted. Ask us to delete a conversation and we will.
Your rights
Under the GDPR, UK GDPR, CCPA and similar laws you have rights of access, correction, erasure, restriction, portability and objection. Since the site collects nothing, exercising them usually takes one email about email. Contact: hello@plainforge.com. If you believe we have handled your data unlawfully you can complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt ↗), the supervisory authority for the operator's place of establishment, or to the authority in your own country.
Changes
If this policy ever changes materially (for example, if analytics are added) the "Last updated" date above changes with it. No retroactive surprises.