My Debt Plan (mydebtplan.uk) is a free personal finance platform that helps individuals track debt, build repayment plans, and manage their financial goals. The platform is operated as an independent project.
We collect only the minimum data necessary to provide the service.
| Data | Why we collect it | How long we keep it |
|---|---|---|
| Username and password (hashed) | Account authentication | Until you delete your account |
| IP address at registration | Spam and abuse prevention | Until you delete your account |
| IP address at login | Session security and fraud detection | 30 days |
| Debt names, amounts and payment history | Core app functionality | Until you delete your account |
| Budget settings and goals | Core app functionality | Until you delete your account |
| Forum posts and replies | Community feature | Until you delete your post or account |
| Documents you upload | Debt document storage feature | Until you delete them or your account |
| Language preference | Saved in your browser (localStorage) | Until you clear your browser data |
We do not collect email addresses unless you voluntarily provide one. We do not collect payment card information. We do not use cookies except for Google Translate functionality if you choose to use it.
Your password is never stored in plain text. It is processed using bcrypt hashing at cost factor 12, a one-way cryptographic function. Even if the database were compromised, passwords could not be recovered. We cannot see or retrieve your password — if you forget it, an admin can reset it for you.
When you log in, a cryptographically signed session token is issued. This token is stored in your browser's localStorage and expires after 30 days. It is verified on every request. We log session IP addresses and browser information for security purposes. You can ask an admin to invalidate all your active sessions at any time.
The following external services may be used by the platform:
No other third-party services, analytics tools, advertising networks or social media pixels are used.
Content you post in the forum is visible to all registered users once approved. Your username appears alongside your posts. Posts are moderated by admins before being published. You can delete your own posts at any time within 15 minutes of posting, or contact an admin for removal after that window.
We log the IP address associated with forum posts for abuse prevention purposes. This is not displayed publicly and is only accessible to admins.
Your data is retained for as long as your account is active. If you delete your account, all personal data is permanently removed from our database immediately. We do not keep backups of deleted user data beyond our standard server backup rotation (typically 7 days). After this window, deleted data is completely unrecoverable.
My Debt Plan is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has registered, please contact us and we will remove the account.
If we make material changes to this policy, we will notify registered users via a platform announcement. Continued use of the platform after changes constitutes acceptance of the updated policy. The date at the top of this page reflects the most recent update.
If you have any questions about this policy or want to request deletion of your data, open the app and use the Delete Account option in your Profile, or contact us through the forum.