Privacy policy

Effective [EFFECTIVE DATE]. Operated by [OPERATOR LEGAL NAME]. Contact: [CONTACT EMAIL].

bestphoneplan.fyi works out which phone carrier and plan cost your household least, once the perks they bundle are counted at what they are worth to you. To do that it needs some information from you. This page lists exactly what, why, who else handles it, and how to get rid of it. It is written to be read.

What we collect

Data	When	Why
Your sheet: what you tell the worksheet — each phone line, with any name you give it (a first name, or nothing: "Line 2" is shown), how much data and hotspot it uses and whether a busy network bothers you; how many watches and tablets; which of these apply to anyone on the account: 55 or older, military or veteran, first responder, teacher, nurse, student; your home internet company; how you would pay autopay (bank, debit or credit card — never the account or card number); the carrier and plan you are on today or the total of your bill, and the months left on phone payments; how well each network works where you are; your video quality; days a year in Mexico or Canada and elsewhere abroad, and which lines travel; whether and which countries you call; what each perk is worth to you; and your rules for the answer. You choose what to enter; none of it is required.	When you fill in the worksheet.	It is what the answer is worked out from. When you ask for the answer ("Show the best plan"), the sheet is sent to our server, the answer is worked out and sent back, and the sheet is not kept from that request. It is saved to your account only if you sign in; otherwise it stays in your browser (see below).
Account, Google sign-in: the name, email address, profile image URL and account identifier Google provides.	When you sign in with Google.	To recognise you and keep your sheets.
Account, username sign-in: your username and a one-way hash of your password. We never store the password itself. An email address only if you add one and confirm it.	When you create a username account.	To recognise you. Without a confirmed email we cannot reset your password or send alerts, and the sign-up form says so.
An email address waiting to be confirmed: the address you typed and a one-way hash of the link's one-time token. We store the hash, never a working link.	When you add or change an email address, until you open the link or 24 hours pass, whichever comes first.	So that an address only reaches your account once someone reading that address has confirmed it. Until then it is not your account's address, and we send nothing else to it. You can cancel it from your account menu.
Your subscription: which tier you have (Pro or Ultra), its status and paid-through date, and your Lemon Squeezy customer and subscription ids. If we gave you the plan for free, a note that it came from a free offer in place of those ids — or, where a code was used, a shortened hash of that code, never the code itself.	When you buy Pro or Ultra, or accept a free grant of Ultra.	To know what you are entitled to. We never see your payment card number.
Preferences: whether you have paused alert emails. No alert emails are sent yet; the switch is kept for when they are.	When you change it.	To respect it.
Technical: your IP address and browser identifier, in server logs and in a short-lived in-memory counter.	Every request.	To run the service, and to limit how often one address can redeem a code or try a password.

We do not collect account numbers, statements, transactions or credit reports, and we never connect to your phone carrier account. We do not ask for your address or location: how well a network works where you are is your own answer. We do not use analytics or advertising trackers.

The worksheet links to each network's own coverage map (Verizon, AT&T, T-Mobile). The link only opens their page; nothing from your sheet is sent with it, and their privacy policies apply there.

Cookies and storage on your device

One cookie, set when you sign in: better-auth.session_token (prefixed __Secure- on the live site). It keeps you signed in. No advertising or analytics cookies.
One browser storage entry when you use the site without signing in: bestphoneplan.sheet.v1 in localStorage, holding the sheet you are editing (everything listed under "Your sheet" above) so it survives a reload. It leaves your browser only when you ask for the answer (it is sent to work the answer out, and not kept) or sign in, at which point it becomes your first saved sheet.
One browser storage entry if you pick a language: bestphoneplan.lang in localStorage, holding the two-letter language code so the site opens in that language next time. It never leaves your browser.

Who else handles your data

Only the services needed to run the site, each for one job:

Google — sign-in, if you choose it.
Lemon Squeezy — payments, as the merchant of record. Your card details go to them, not us. Their policy governs that data.
Neon — hosts the database that stores accounts and sheets.
Render — hosts the application and keeps its server logs.
Resend — delivers the only emails we send: a link to confirm an address you typed, a note to your old address when the one on your account changes, a password reset you asked for. We send no marketing.
Have I Been Pwned — when you set a password we send the first five characters of a one-way hash of it to check whether it appears in known breaches. Neither your password nor your identity leaves our server.

We do not sell data, share it for advertising, or build profiles.

How long we keep it

Account data, sheets, purchase records and preferences: until you delete your account. Deleting it from the account menu removes all of them at once. Lemon Squeezy keeps its own records of payments as the law requires of it.
Server logs: kept by our host for a limited period [RENDER LOG RETENTION — verify], then gone.
Rate limits: the counter forgets an address within a minute.

Your choices and rights

Use the site without an account; nothing is saved beyond your own browser.
Delete your account yourself, at any time, from the account menu.
Ask us for a copy of your data, a correction, or deletion by writing to [CONTACT EMAIL]. If you are in the EU/EEA, UK, or California, the rights those laws give you apply and this is how to exercise them.

Age

The site is about phone plans and is for people 18 and over.

Changes

When this page changes, the effective date above changes with it. Material changes to how we handle account data will also be announced on the site.