Privacy

Your plan stays yours

The short version: your plan is encrypted on your own device before it's stored. We keep only an unreadable copy — we can't see your figures, and we never sell or share your data.

Last updated: 17/06/2026 · Preview release

The one thing that matters most: your retirement plan — your pensions, savings, property, income and every figure you enter — is encrypted on your own device with a key only you hold. When it's saved to your account, we store only an unreadable, scrambled copy. Neither we nor our database host can turn it back into your numbers. There's a fuller explanation on our Security & encryption page.

Two ways to use ThreeScoreAndOn

You can use the planner in either of two ways, and they handle your data differently:

Without an account (Try it free). Your plan is kept only in your own web browser's local storage, on your device. It is not uploaded to us at all. Clearing your browser data, or switching browser or device, means it won't be there.
With an account. So you can return to your plan and use it on more than one device, an encrypted copy is saved to our database. It's encrypted on your device first, so what we store is unreadable to us.

How your plan is protected

When your plan is saved to your account:

It is encrypted in your browser using strong, industry-standard encryption (AES-256-GCM) before it leaves your device.
The key is derived on your device from your password — or, if you choose, a separate passphrase — and is never sent to us. We never store it and have no copy.
On our servers your plan exists only as ciphertext. Without your key it's meaningless — to us, to our database host, and to anyone who ever obtained a copy of the database.

Because only you hold the key: if you forget your password we can't recover your plan for you. To protect you, you get a one-time recovery code when you secure your account — keep it safe. Lose both your password and your recovery code, and the plan can't be recovered by anyone. See Security & encryption for the full picture.

What we store

To run your account we hold a small amount of information that is not part of your encrypted plan. We use a third-party authentication and database provider (Supabase) for this:

Your email address, to create and verify your account and let you sign in or reset your password.
The encrypted (unreadable) copy of your plan, plus basic timestamps such as when it was last saved.

We do not sell or share your information, and there are no advertising trackers in the product.

The honest limits

We'd rather be straight about the edges than oversell this. Encryption protects your plan on our servers and in transit; it can't protect data on a device that's already compromised, and anyone using your already-unlocked device could in principle read what's on it. Your protection is also only as strong as the password or passphrase behind it — so use a strong, unique one. Keeping your own device and browser secure remains your responsibility.

Analytics

If enabled, we use privacy-friendly, cookieless analytics on the public pages to understand visitor numbers in aggregate (page views, country, referrer). This does not use cookies, does not track you across sites, and collects no personal data or financial figures. No analytics run inside your private plan.

Contact form

If you use the contact form on the main page, the name, email address and message you enter are sent to us by email (via our email provider, Resend) so we can read and reply. We use these details only to respond to you. We don't add you to any marketing list, and we don't share them with anyone else.

This is a preview

ThreeScoreAndOn is a planning and education tool in preview release, provided as-is and free of charge. It is not financial advice. This notice may change as the product develops; the date above shows when it was last updated.

Contact

Questions about privacy? Get in touch via the contact form on the main site, or email craig@threescoreandon.com.