Security & Privacy

1. What data we collect

Worthmap has two parts: this website, worthmap.com, with its calculators and articles, and the net worth tracker at my.worthmap.com, which needs an account. What we collect depends on which one you use:

• Account data, the details you give when you register for the tracker, such as your name, email address and password.
• Financial data you enter in the tracker, asset values, holdings, currencies, income and expenses. This data is kept in your Worthmap account on our servers, not only in your browser.
• Usage analytics, on worthmap.com, Google Analytics and Microsoft Clarity record which pages are visited and how they are used. They load only after you accept them in the cookie banner.
• Support messages, the emails you send us directly.

The calculators on worthmap.com work without an account. The net worth tracker stores the figures you enter in your account, so that they are there when you sign in again.

2. Encryption in transit

All connections to worthmap.com and my.worthmap.com use HTTPS, and both accept TLS 1.3. Both are served through Cloudflare, so what you send travels encrypted between your browser and the service.

HTTPS protects data on its way to us. It does not, on its own, say anything about how data is stored afterwards, and we make no claim on this page beyond what we can state plainly.

3. No data selling, ever

Worthmap does not sell, rent, or trade your personal data or financial data to third parties for marketing or advertising. This is a foundational product principle, not just a legal clause.

We do rely on outside services to run Worthmap. They include Cloudflare for hosting, Google Analytics and Microsoft Clarity for usage analytics on this website, Mailchimp for the email updates you can sign up for, and exchangerate-api.com for the exchange rates some calculators load. Our Privacy Policy sets out the cases in which information is shared.

4. Account security tips

The strongest security measure is one you control. We recommend:

• Use a unique password not shared with any other service. A password manager (Bitwarden, 1Password) makes this easy.
• Never share your login credentials, Worthmap staff will never ask for your password by email or phone.
• Log out of shared or public devices after each session.
• Keep your registered email account secure, it is the recovery path for your Worthmap account.

5. Cookies and tracking

On worthmap.com:

• Preferences, your language, your light or dark theme and your cookie choice are remembered in the local storage of your browser, not sent to us.
• Analytics cookies, set by Google Analytics and Microsoft Clarity. They are set only after you accept them in the cookie banner.

There are no advertising scripts on this website, and we do not sell cookie data. For full details see our Privacy Policy §7.

6. Contact for security issues

If you believe you have found a security vulnerability in Worthmap, please email us before disclosing it publicly:

Security email: [email protected]

For general support or privacy questions: [email protected]

7. Responsible disclosure policy

We welcome security researchers who responsibly help us keep Worthmap safe. If you find a vulnerability:

• Email [email protected] with a clear description, steps to reproduce, and any supporting evidence (screenshots, logs, proof-of-concept).
• Give us reasonable time to investigate and resolve the issue before any public disclosure.
• Do not access, modify, or delete the data of other users during your testing.
• Do not perform denial-of-service testing or social engineering against Worthmap users or staff.

If you would like to be credited for a valid report, tell us in your email.