Privacy Policy
Last updated: September 30, 2026
1. Introduction
FreelanceMath ("we," "us," or "our") operates the website located at freelancemath.com (the "Website"). We are committed to protecting your personal data and respecting your privacy rights under applicable law, including the General Data Protection Regulation (GDPR) (EU) 2016/679, the UK GDPR, and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit or interact with our Website. Please read this document carefully. By continuing to use our Website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
FreelanceMath
Operated from the Republic of Ireland
Website: freelancemath.com
Contact Email: freelancemath.mail@gmail.com
For all privacy-related inquiries, data subject access requests, or concerns about how we handle your personal data, please contact us using the email address above.
3. Data We Collect
3.1 Personal Data You Provide Directly
When you use newsletter sign-ups or lead-magnet PDF downloads on the Website, we may collect:
- Email address
- Optional source tag indicating which page you subscribed from (for example, a calculator or guide slug)
- Any other information you voluntarily type into a signup field
When you submit your email address through any signup form on this site - including newsletter sign-ups and lead-magnet PDF downloads such as the 2026 Freelancer Tax Checklist - your email is sent via our Vercel-hosted subscribe endpoint to Buttondown, our email service provider (buttondown.com). Buttondown processes your email under their own privacy policy. We use your email to send the requested resource, occasional editorial updates, and freelance tax tips. You can unsubscribe at any time using the link in any email.
3.2 Usage Data (Automatically Collected)
When you visit our Website, we and our processors may automatically collect certain technical data, including:
- IP address (which may be anonymised or truncated for analytics; may also be forwarded to Buttondown for spam/firewall checks when you subscribe)
- Browser type and version
- Operating system and device type
- Pages visited and time spent on each page
- Referring URLs (the page you came from)
- Date and time of your visit
- General geographic location (country/region level, derived from IP)
- Your privacy choices. If you are in the EEA, the UK or Switzerland, your consent choice is stored by Google's consent tool. Elsewhere, if you use "Do Not Sell or Share My Personal Information", we store that opt-out in your browser (local storage).
3.3 Calculator and Tool Inputs
Values you enter into calculators and generators on the Website (for example income figures, rates, or invoice fields) are processed in your browser for the purpose of showing results on that page. We do not collect, store, or transmit those tool inputs to our servers as part of the calculation itself. If a page also offers an email signup or PDF lead magnet, only the email-related data described in Section 3.1 is sent to our processors.
3.4 Cookies and Tracking Technologies
We use cookies and local storage to operate and improve our Website. See Section 9 (Cookies Policy) for full details.
4. How We Use Your Data
We process your personal data for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and operating the Website | Legitimate interests (Art. 6(1)(f)) |
| Website analytics with Google Analytics 4, for visitors in the EEA, the UK and Switzerland | Your consent (GDPR Art. 6(1)(a)) |
| Website analytics with Google Analytics 4, for visitors everywhere else (including the US) | Our legitimate interests in understanding how the site is used so we can improve it (GDPR Art. 6(1)(f)). You can opt out at any time (see section 7.2A). |
| Showing ads with Google AdSense, for visitors in the EEA, the UK and Switzerland | Your consent. This covers storing and reading cookies or similar identifiers on your device (Irish ePrivacy Regulations, S.I. 336/2011, reg 5(3)) and the processing that follows (GDPR Art. 6(1)(a)). |
| Showing ads with Google AdSense, for visitors everywhere else (including the US) | Our legitimate interests in funding a free website (GDPR Art. 6(1)(f)). You can opt out of personalised ads at any time (see section 7.2A). |
| Newsletter sign-ups and lead-magnet PDF delivery (Buttondown) | Consent (Art. 6(1)(a)) |
| Hosting, security, and request routing (Vercel) | Legitimate interests (Art. 6(1)(f)) |
| Improving the Website's content and user experience | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
Legitimate Interests: Where we rely on legitimate interests as a legal basis, we have determined that our interests in operating and improving the Website are not overridden by your data protection rights. You have the right to object to this processing at any time (see Section 7).
5. Data Processors and Third Parties
5.1 Google Analytics 4 (GA4)
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Role: Analytics processor - collects and processes usage data to help us understand how visitors interact with our Website.
Data Processed: IP address (anonymised), device and browser data, pages visited, session duration, events and interactions.
Privacy Policy: policies.google.com/privacy
Opt-Out: tools.google.com/dlpage/gaoptout, or use "Do Not Sell or Share My Personal Information" in our footer (outside the EEA, UK and Switzerland).
We have enabled IP anonymisation in GA4. Data may be transferred to the United States. Google acts as a data processor under a Data Processing Addendum that incorporates Standard Contractual Clauses (SCCs).
When it runs. If you are in the EEA, the UK or Switzerland, Google Analytics runs only if you consent in our consent tool. Everywhere else, it runs by default. We have turned off Google signals and ads personalisation for analytics hits from this site, so your analytics data is not used to personalise ads. Outside the EEA, the UK and Switzerland, you can switch analytics off with "Do Not Sell or Share My Personal Information" in the footer, and it is switched off automatically if your browser sends a Global Privacy Control signal.
How long. Google Analytics keeps user-level data for 2 months, after which only aggregated reports remain.
5.2 Google AdSense
Provider: Google Ireland Limited (for visitors in the EEA and Switzerland) and Google LLC.
Role: Advertising technology provider - serves contextual and/or personalised advertisements on our Website.
Data Processed: Cookie and device identifiers, IP address (used for approximate location and ad delivery), browser and device information, the page you are viewing, ad interactions and, for personalised ads only, browsing activity across sites.
Privacy Policy: policies.google.com/privacy
Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this Website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to this Website and/or other sites on the Internet.
You may opt out of personalised advertising by visiting Google Ad Settings at myadcenter.google.com. You may also opt out of some third-party vendors' use of cookies for personalised advertising by visiting www.aboutads.info. These options are in addition to the choices in Section 7.2A and Section 9.3.
Other third-party vendors and ad networks may also serve ads on this Website through Google AdSense and may use cookies to do so. Where a vendor offers it, you may opt out of that vendor's use of cookies for personalised advertising at www.aboutads.info. For more information about how Google uses data from websites that use its services, see policies.google.com/technologies/partner-sites.
How ads work on this site. This site is free because it shows ads from Google AdSense. To deliver ads, Google (and, where you allow it, other ad partners listed in our consent tool) may store or read small files such as cookies, or similar identifiers, on your device. Google does this even for non-personalised ads. Non-personalised ads are not based on your past browsing, but they still use cookies to limit how often you see the same ad, to detect fraud and invalid clicks, and to measure ads in aggregate. Personalised ads also use information about your activity across sites to choose ads.
If you are in the EEA, the UK or Switzerland. Google's ad code loads when you arrive so that it can show our consent tool, which is provided through Google's certified consent platform. No advertising cookies are set, and no personalised ads are shown, until you make a choice. You can consent to all, refuse all, or choose by purpose and partner, and the "Consent" and "Do not consent" buttons appear together on the first screen. We rely on your consent both to store and read cookies or identifiers on your device and for the processing of personal data that follows (GDPR Art. 6(1)(a)). If you refuse consent, Google may still show a "limited" ad. Limited ads are not personalised. Google may use a cookie or local storage only to detect invalid traffic and fraud, and your IP address is used to deliver the ad.
If you are anywhere else, including the United States. See section 7.2A.
Google's role. For its own advertising purposes, such as measuring ads, fighting fraud and personalising ads, Google acts as an independent controller of your personal data under its own privacy policy. We decide to place Google's ad code on our site, and we are responsible for that choice and for the choices we offer you. We do not receive the data Google collects through its cookies. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and manage Google ad personalisation at myadcenter.google.com.
How long. If you are in the EEA, the UK or Switzerland, your choice is stored by Google's consent tool, and then we ask you again after the period set in that tool. Outside Europe, an opt-out is stored in your browser until you clear it. Google's advertising cookies last for the periods shown in our consent tool's partner list, and Google keeps the data under its own retention policy.
Transfers. Google may process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework and also uses Standard Contractual Clauses.
5.3 Vercel
Provider: Vercel Inc., 340 Pine Street, Suite 900, San Francisco, CA 94104, USA
Role: Hosting and infrastructure provider - hosts the Website and processes server-side request data.
Data Processed: IP addresses, HTTP request headers, server logs.
Privacy Policy: vercel.com/legal/privacy-policy
Vercel processes data as a data processor under a Data Processing Agreement. Data may be transferred to the United States under appropriate safeguards.
5.4 Buttondown
Provider: Buttondown LLC (Buttondown), USA
Role: Email newsletter and lead-magnet processor - stores subscriber email addresses, sends subscription confirmation emails, delivers the generic 2026 Freelancer Tax Checklist PDF link, and sends occasional newsletter emails when you opt in on our tool or guide pages.
Data Processed: Email address, optional source tag indicating which page you subscribed from (e.g. a calculator or guide), subscription status (including double opt-in confirmation), and subscriber IP address when provided by our subscribe endpoint for spam/firewall checks. We do not send calculator inputs or other personal financial data to Buttondown.
Privacy Policy: buttondown.com/legal/privacy
We use double opt-in: after you submit your email, Buttondown sends a confirmation link. Your address is not added to our mailing list until you confirm. The generic checklist PDF may download immediately in your browser after signup; the same PDF is also linked from our confirmation email. Legal basis: consent (Art. 6(1)(a) GDPR) for EEA/UK users; your consent for US users.
We share your email with Buttondown solely for the purpose of email delivery and list management. No other data is shared with third parties for marketing.
5.5 Other Third Parties
Our Website may contain links to external websites or embed content from third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external sites you visit.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.
| Data Category | Retention Period |
|---|---|
| Newsletter subscribers (Buttondown) | Until you unsubscribe or request deletion, managed per Buttondown's retention practices |
| Analytics data (GA4) | 2 months for user-level event data; aggregated reports are kept longer. |
| Server/access logs (Vercel) | Up to 30 days, as per Vercel's standard log retention |
| Your privacy choices | EEA, UK and Switzerland: as set by Google's consent tool, and we ask again after the period set in that tool. Elsewhere: your opt-out stays in your browser until you clear site data. |
| Cookies (session cookies) | Deleted when you close your browser |
| Cookies (persistent/analytics) | As described in the Cookies Policy (Section 9); typically up to 13 months |
| Advertising data (AdSense) | As determined by Google's data retention practices |
| Calculator/tool inputs | Not retained by us; remain in your browser session only |
When data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.
7. Your Rights
7.1 Rights Under GDPR (EEA and UK Users)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR or UK GDPR:
- Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): You may request that we correct any inaccurate or incomplete personal data.
- Right to Erasure (Art. 17): You may request that we delete your personal data ("right to be forgotten"), subject to certain legal exceptions.
- Right to Restriction of Processing (Art. 18): You may request that we limit how we use your data while a dispute is resolved.
- Right to Data Portability (Art. 20): Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
- Right to Object (Art. 21): You may object to processing based on legitimate interests, including profiling. You may also withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interests you can object at any time. Where the processing is for advertising, we will stop.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your supervisory authority. In Ireland, this is the Data Protection Commission (DPC): dataprotection.ie. In the UK, this is the Information Commissioner's Office (ICO): ico.org.uk.
7.2 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the following rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share it.
- Right to Delete: You may request the deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing: We do not sell personal information for monetary consideration. To the extent that sharing personal data with advertising partners (such as Google AdSense) constitutes "sharing" under the CPRA, you may opt out by using "Do Not Sell or Share My Personal Information" in our footer or by turning on Global Privacy Control in your browser (see section 7.2A) or by managing ad personalisation at myadcenter.google.com.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
7.2A Visitors outside the EEA, the UK and Switzerland (including the US)
Default ads. If you visit from outside the EEA, the UK and Switzerland, we show Google ads by default, and these may be personalised. We are based in Ireland, so EU data protection law (GDPR) applies to how we handle your data wherever you are.
Your choices.
- Opt out. Click "Do Not Sell or Share My Personal Information" in the footer of any page. If you are in a US state covered by Google's US privacy tool, the link opens Google's opt-out. Everywhere else, we save your choice in your browser. Either way, from then on you see only non-personalised ads and Google Analytics is switched off for your visits, and we ask Google to use "restricted data processing" for your visits, so Google does not use your data to build or use an advertising profile about you. Google may still use cookies or similar identifiers to deliver ads, limit repeats, prevent fraud and measure ads. Your choice applies to this browser and device, and clearing your cookies or site data removes it.
- Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out: you see only non-personalised ads and Google Analytics is switched off, without having to click anything.
US state privacy rights. Depending on your state (for example California, Colorado, Connecticut, Virginia and others), you may have the right to know about, access, correct and delete your personal information, and to opt out of its "sale", its "sharing" for cross-context behavioural advertising, or targeted advertising. We do not sell personal information for money. Personalised ads may count as "sharing" or "targeted advertising" under some state laws, and you can opt out as described above. We will not treat you differently for using these rights. To make a request, email freelancemath.mail@gmail.com. We respond within 45 days, and you can appeal a refusal by replying to our response.
7.3 How to Exercise Your Rights
To exercise any of the above rights, please contact us at:
Email: freelancemath.mail@gmail.com
Please include your name, email address, country of residence, and a description of your request. We will respond within 30 days (GDPR) or 45 days (CCPA) of receiving a verifiable request. We may need to verify your identity before processing your request.
8. International Data Transfers
FreelanceMath is operated from the Republic of Ireland (EU). Our Website is hosted and several processors operate in the United States and other countries. If you access our Website, your personal data may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
For transfers of personal data from the EEA or UK to the United States or other third countries, we rely on the following safeguards:
- Standard Contractual Clauses (SCCs): We ensure our data processors (including Google, Vercel, and Buttondown, as applicable) have executed SCCs approved by the European Commission, or equivalent transfer mechanisms approved under UK law.
- Adequacy Decisions: Where applicable, we rely on any adequacy decision made by the European Commission in respect of a recipient country (including, where relevant, the EU-US Data Privacy Framework for certified organisations).
By using our Website, you acknowledge that your data may be transferred internationally in accordance with the safeguards described above.
9. Cookies Policy
9.1 What Are Cookies?
Cookies are small text files placed on your device by a website. They help websites function correctly, remember preferences, and collect information about how users interact with the site.
9.2 Types of Cookies We Use
| Cookie Category | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Essential for the Website to function. Cannot be disabled. | Session cookies, security cookies |
| Analytics / Performance | Google Analytics 4 cookies (_ga, _ga_*) measure visits and page use. EEA, UK and Switzerland: only with your consent. Elsewhere: set by default; you can switch them off (section 7.2A). | _ga, _ga_* |
| Advertising | Used to show ads, limit repeats, detect fraud and measure ad performance, and, for personalised ads, to choose ads based on your interests. Set by Google, and by other ad partners only where you allow it; they can read these cookies. EEA, UK and Switzerland: only with your consent (a limited-ads fraud-detection cookie may be used if you refuse, see section 5.2). Elsewhere: set by default; you can opt out of personalised ads (section 7.2A). Duration: see our consent tool's partner list. | Google AdSense cookies; partner cookies where you allow them |
| Functional / Preference | Remember your privacy choices. | Google's consent tool cookies (EEA, UK and Switzerland); our opt-out setting in local storage (elsewhere). |
9.3 Managing Cookies
You may manage or withdraw your consent for non-essential cookies at any time using the following options:
- Privacy and cookie settings (EEA, the UK and Switzerland): You can change or withdraw your consent at any time, as easily as you gave it, using "Privacy and cookie settings" in the footer of every page. Withdrawing consent stops new advertising cookies from being set or read from then on. It does not affect processing that happened before. We ask for your choice again after the period set in our consent tool.
- Do Not Sell or Share My Personal Information (everywhere else): Use "Do Not Sell or Share My Personal Information" in the footer, or turn on Global Privacy Control in your browser.
- Browser Settings: Most browsers allow you to refuse or delete cookies through their settings. Refer to your browser's help section for instructions.
- Google Analytics Opt-Out: Install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
- Google Ad Settings: Manage personalised ad preferences at myadcenter.google.com.
Please note that disabling certain cookies may affect the functionality of the Website.
10. Children's Privacy
Our Website is not directed at, and we do not knowingly collect personal data from, children under the age of 13 (or under 16 in certain EEA member states where a higher age threshold applies). If you are under the applicable age of digital consent, please do not submit any personal data through our Website.
If we become aware that we have inadvertently collected personal data from a child under the applicable threshold without verifiable parental consent, we will take steps to delete that data promptly. If you believe we have collected personal data from a child, please contact us at freelancemath.mail@gmail.com.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include secure HTTPS connections, access controls, and reputable hosting infrastructure through Vercel.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes, we may also provide a more prominent notice on the Website.
We encourage you to review this Privacy Policy periodically. Your continued use of the Website after any changes have been posted constitutes your acknowledgment of the updated policy.
13. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:
FreelanceMath
Email: freelancemath.mail@gmail.com
Website: freelancemath.com
This Privacy Policy was last updated on September 30, 2026.