Skip to content

Legal · PDPA

Privacy

What we collect when you visit, why, who handles it and how long we keep it. No accounts, no ads, nothing sold.

In short

Numbers.sg has no accounts and no ads, and never sells personal data. We only email you if you sign up for a rate alert and confirm it. What you type into a calculator stays in your browser. We count visits with Google Analytics, with advertising features switched off; visitors in the EU, EEA, UK and Switzerland are asked first, and you can turn it off below. We follow Singapore’s Personal Data Protection Act 2012 (PDPA).

At a glance

WhatWhyWhere it goesKept for
What you type into a calculatorTo work out your answerStays in your browserUntil you leave the page
SSBs you save in the SSB calculatorSo your list is there next timeYour browser onlyUntil you clear it
Holdings in the dividend calendar’s feedTo build your calendar of payout datesOur server, each time your calendar app refreshes the feedNot stored; only in server logs for a short rolling period
“Was this helpful?” answersTo see which charts and calculators need workOur server: a count, plus your note if you write oneCounts: kept. Notes: 12 months
Your email, if you sign up for a rate alertTo send the alerts you choseOur server; sent through ResendUntil you unsubscribe (unconfirmed: 7 days)
Visit statisticsTo see which pages to keep up to dateGoogle AnalyticsUp to 14 months
Server and security logsTo run the site and block attacksOur host and CloudflareA short rolling period
Your email, if you writeTo reply and follow up a correctionThe editor’s mailboxAs long as needed to reply

What we collect

  • Calculators: every sum is done in your browser. What you type is not sent to us or stored on our server.
  • Saved SSBs: if you add bonds to “My SSBs” in the SSB calculator, the list is saved in your own browser. A share link carries the list after the # in the address, a part browsers never send to a server.
  • Dividend calendar: the shares and units you type into “your payouts” on the dividend calendar are added up in your browser; a copied link carries them after the #, which browsers never send to a server. If you add the calendar feed to your calendar app, the feed’s address holds the company codes and the number of shares or units (not prices), so your calendar app sends them to us each time it refreshes. We use them to build the feed and don’t store them; like any request, the address appears in our server logs for a short rolling period. Anyone you give the feed address to can see those holdings.
  • Rate alerts: if you sign up, we keep your email address, the alerts you chose, the page you signed up on, and when you signed up and confirmed. See Rate alerts.
  • “Was this helpful?”: under each chart and calculator you can answer Yes or No and add a short note. We store the count and, if you write one, the note with its date. We don’t store your name, email or IP address with it. To stop the same person voting twice, a one-way scrambled (hashed) version of your IP address is held for 24 hours and then deleted; it can’t be turned back into the address. Please don’t put personal details in the note.
  • Charts on other sites: if another website shows one of our charts or calculators (an embed), it loads without Google Analytics and sets no cookies.
  • Server logs: like every website, our host and our network provider record technical details of each request, such as IP address, browser type and the page asked for. They are used to keep the site running and to block attacks.
  • Email: if you write to us, we keep your message and address to reply and to follow up a correction. We don’t add you to any list, and we never publish your name without asking.

We don’t sell or rent personal data, we don’t ask you to create an account, and we don’t knowingly collect data from children.

Cookies and browser storage

NameSet byWhat it doesLasts
_ga, _ga_…Google Analytics (cookie)Tells one visit from the next. Only set when analytics runs.Up to 2 years
ns.consentNumbers.sg (browser storage)Remembers whether you accepted or declined analyticsUntil you clear it
ns-ssb-mineNumbers.sg (browser storage)Your saved list in the SSB calculatorUntil you clear it
ns-cpi-seenNumbers.sg (browser storage)On the inflation page: the month of figures you last saw and the date, so the page can say what changed since your last visitUntil you clear it

Cloudflare may set a short-lived security cookie if it needs to check that a visitor is not a bot. There are no advertising cookies on Numbers.sg.

Rate alerts by email

  • You sign up on a page or on Rate alerts, then confirm by tapping the link we email you. Nothing else is sent until you confirm, and sign-ups not confirmed within 7 days are deleted.
  • We keep your email address, the alerts you chose (for example Savings Bonds, T-bills, CPF interest or inflation; all of them are listed here), the page you signed up on, when you signed up and confirmed, and how many alerts we have sent you. We use them only to send the alerts you chose.
  • The emails are sent through Resend, our email provider. It handles your address and delivery details (such as whether a message was delivered or bounced) to send them. We don’t track opens or clicks in our emails; links to our pages carry a label saying they came from an alert, which shows up in our visit statistics.
  • Every email has a one-tap unsubscribe link. Unsubscribing deletes your address from our list straight away.
  • We never sell, rent or share the list, and never use it for anything but these alerts.

Visitor statistics (Google Analytics)

We use Google Analytics 4 to count visits and see which pages are read, so we know what to keep up to date. It records the pages you view, roughly where you are (country and city, worked out from your IP address, which Google Analytics does not store), your device and browser, and the site that sent you. It sets cookies whose names start with _ga to tell one visit from the next.

  • Google signals and ad personalisation are switched off, so this data is not linked to your Google account or used for advertising.
  • We keep the statistics for up to 14 months.
  • Visitors in the EU, EEA, UK and Switzerland are asked first, and nothing loads unless they accept.
  • If your browser sends a Global Privacy Control signal, Google Analytics never runs.
  • Anywhere else, it runs by default and you can turn it off below.

Google processes this data under its own privacy policy. You can also block it on every site with Google’s opt-out browser add-on.

Your analytics choice

JavaScript is off, so Google Analytics is not running in this browser.

Change my analytics choice

Who handles data for us

We use a small number of service providers. Each only gets what it needs to do its job.

ProviderWhat forWhere
DigitalOceanHosts the websiteUnited States
CloudflareDelivers pages quickly, blocks attacks, forwards email sent to hello@numbers.sgWorldwide network
GoogleVisitor statistics (Google Analytics)United States and worldwide
ResendSends rate alert emails, if you sign upUnited States
BackblazeEncrypted nightly backups of the websiteUnited States

Because these providers are outside Singapore, data may be processed abroad. As the PDPA requires, we use providers bound by their own data protection terms to protect it to a standard comparable to Singapore’s.

How long we keep it, and how we protect it

  • Visit statistics: up to 14 months, then deleted by Google Analytics.
  • Server and security logs: a short rolling period, then overwritten.
  • Rate alert sign-ups: until you unsubscribe; unconfirmed sign-ups 7 days.
  • “Was this helpful?” notes: 12 months, then deleted. The hashed IP used to stop repeat votes: 24 hours.
  • Emails: as long as needed to answer you and follow up a correction.
  • Backups are encrypted before they leave our server, and the site runs on HTTPS only.

Ads

Numbers.sg does not show ads yet. Before it does, this page will be updated first to say what the ad provider collects and how to opt out, and the change will be listed on What’s new.

Your data rights

Under the PDPA you can:

  • ask what personal data we hold about you, and how it has been used;
  • ask us to correct it;
  • withdraw your consent, for example to analytics, or ask us to delete what we hold.

Write to us at the address below. We reply within 30 days. If you are not satisfied with our answer, you can contact Singapore’s Personal Data Protection Commission.

Data protection contact

Our data protection officer is the editor, Jeremiah Say. Email hello@numbers.sg with Privacy: in the subject, or use the Contact page.

Changes to this page

When this policy changes, the date at the top of the page changes and the change is listed here and on What’s new.

  1. Our privacy page now covers the dividend calendar: the holdings you type stay in your browser and in the link’s # part, which isn’t sent to us, except when you add the calendar feed, whose address carries them so your calendar app can fetch it. Privacy

  2. Privacy: added the “Was this helpful?” buttons under charts and calculators (what we store: a count and any note you write, notes kept 12 months, no name, email or IP; a hashed IP for 24 hours to stop repeat votes) and charts shown on other sites (no analytics, no cookies). See Privacy

  3. Privacy: added rate alerts by email (what we keep: your address, the alerts you chose, the page you signed up on and when; unconfirmed sign-ups deleted after 7 days; sent through Resend, with no open or click tracking; unsubscribing deletes your address). See Privacy

  4. Privacy and Rate alerts updated before adding SORA alerts: the new SORA email, what it holds and how often it comes. Nothing else about how we handle your email changes. Read the Privacy page

  5. Privacy: the list of rate alerts you can choose now includes DBS promotions, ahead of that alert opening on our DBS page. The data kept is the same as for every alert. Read the Privacy page

  6. Privacy: the list of alerts you can choose now includes stamp duty, one email if IRAS changes the buyer’s stamp duty or ABSD rates. The data kept is the same as for every alert. Read the Privacy page

  7. Privacy updated before adding Google Analytics: what it records, that ad signals are off, consent for EU and UK visitors, and how to turn it off. Read the Privacy page

  8. Privacy rewritten: a summary table of what we collect and why, every cookie and browser-storage item listed, the providers that handle data and where, how long we keep it, your PDPA rights and our data protection contact. What we collect has not changed. Read Privacy