Privacy Policy
Last updated: 17 September 2026
Decidaro respects your privacy and is committed to transparent, responsible information handling across our decision-support platform.
Our core decision tools are designed to be usable without requiring an account or email address simply to calculate or view a normal comparison.
This Privacy Policy explains how information may be collected, processed, and safeguarded when you use Decidaro across the United States, Canada, the United Kingdom, and the United Arab Emirates.
1. Who operates Decidaro
Decidaro is an independent, unincorporated project operated jointly by Muhammad Iqbal and Nilofer Ahmed. For privacy and legal enquiries, contact legal@decidaro.com.
2. Information users provide
When you use a Decidaro decision calculator, comparison module, or interactive tool, you may submit non-identifying input parameters necessary to calculate your result. Depending on the specific tool, these may include:
- budget ranges and purchase estimates
- usage assumptions, mileage, or holding horizons
- household size or general lifestyle requirements
- geographic market or regional selections (such as US, UK, Canada, or UAE)
- general financial assumptions (such as deposit percentages or interest expectations)
Sensitive information notice: Decidaro decision tools do not require and do not ask for passwords, credit or debit card numbers, bank account credentials, government-issued identification numbers (such as Social Security, National Insurance, or Emirates ID numbers), or confidential tax filings. Please do not submit sensitive personal or financial information into our decision fields.
3. Technical information processed automatically
When you access and browse Decidaro, standard web hosting and routing infrastructure automatically processes technical telemetry generated by your device and browser, including:
- Internet Protocol (IP) address
- browser type, version, and language configuration
- operating system and device hardware characteristics
- approximate geographic region derived from network information
- referring URL, access timestamps, and page request headers
- system performance diagnostics and network security logs
4. Purposes of processing
Information processed through Decidaro is used for specific, limited operational purposes:
- to compute, render, and display requested decision results and comparisons
- to deliver and maintain reliable platform stability, server availability, and cybersecurity
- to diagnose software errors, resolve bugs, and optimize calculation methodology
- to evaluate overall website performance and user experience metrics where enabled
- to comply with applicable legal, accounting, and regulatory standards
- to enforce terms of use, prevent unauthorized scraping, and protect against misuse
5. Hosting and service providers
Decidaro is deployed and hosted on Firebase App Hosting, a managed cloud application platform built on Google Cloud infrastructure (including Google Cloud Run).
Google Cloud infrastructure processes standard HTTP/HTTPS request headers, IP addresses, and operational network telemetry necessary to transmit website content securely and reliably across global edge networks. Decidaro relies on trusted enterprise cloud infrastructure that maintains robust physical, technical, and organizational data protection safeguards.
6. Google Tag Manager and Google Analytics
To understand platform adoption and evaluate tool usefulness, Decidaro may use Google Tag Manager (GTM) and Google Analytics 4 (GA4) where enabled.
Future-ready conditional operation: Google Tag Manager serves as a tag deployment container and does not itself set tracking cookies or collect personal profiles. Where Google Analytics 4 is enabled, it may process pseudonymous visitor data, device characteristics, engagement events (such as tool views or button clicks), and general regional location.
No sensitive financial telemetry: Decidaro does not configure or intend analytics event streams to record or transmit passwords, credit card numbers, banking credentials, government identification numbers, or confidential financial values.
Consent integration: Where applicable law requires prior visitor consent for analytics cookies or device identifiers (such as under the UK GDPR or EU ePrivacy rules), GA4 is configured to operate in conjunction with Google Consent Mode v2. In these regions, analytics measurement storage is blocked or restricted until affirmative consent is provided.
7. Microsoft Clarity
Where enabled, Microsoft Clarity may provide heatmaps, interaction analytics, and session playback or recordings to evaluate user experience and platform usability.
Privacy masking: Input-box content is masked by Clarity by default, and Decidaro will configure additional sensitive-content masking where appropriate so that personal identifiers and sensitive user entries are not captured in session recordings.
Provider retention: According to Microsoft Clarity’s standard provider retention schedules, ordinary session playback data is generally retained for 30 days, while click and heatmap metrics and certain retained recordings may be preserved for up to 9 months.
Clarity Consent API: Where user consent is required before behavioural recording or non-essential technologies operate, Microsoft Clarity will be integrated with our consent management platform via the Microsoft Clarity Consent API, ensuring tracking scripts execute only where permitted.
8. Consent management
Where relevant to Google advertising and IAB Europe Transparency and Consent Framework (TCF) requirements, Decidaro implements or intends to implement a Google-certified consent management platform (CMP), such as CookieYes, to govern the deployment of cookies and tracking scripts.
The CMP provides visitors with transparent granular controls over non-essential technology categories, including:
- Essential technologies: Strictly necessary for server routing, core calculation rendering, security, and consent logging. These cannot be disabled.
- Analytics & performance: Measurement technologies (such as GA4 or Clarity) that activate only where consent has been granted where required by law.
- Advertising & commercial: Technologies supporting ad personalization or partner conversion verification where enabled.
Consent preferences are communicated to downstream technologies via Google Consent Mode v2 and the Microsoft Clarity Consent API. Visitors may review, update, or revoke their preferences at any time using on-site consent settings or our dedicated Cookie Policy.
9. Advertising including Google AdSense
Decidaro may introduce digital advertising, including programmatic advertisements served through Google AdSense or qualified advertising exchanges, when approved and enabled.
When advertising is displayed on Decidaro:
- Third-party vendors, including Google, may use cookies, web beacons, or unique device identifiers to serve advertisements based on prior visits to this website or other web destinations.
- Google’s advertising cookies enable it and its network partners to serve relevant ads based on visitor navigation across Decidaro and across the wider internet.
- Where required by applicable regional law (including in the UK and EU), personalized advertising will not be served unless the user has provided express consent through our consent manager. In the absence of consent, non-personalized contextual ads may be displayed.
Visitors may opt out of personalized advertising by visiting Google Ads Settings or through industry opt-out portals such as www.aboutads.info and www.youronlinechoices.eu.
10. Affiliate and referral relationships
Decidaro may introduce affiliate marketing arrangements, commercial referral partnerships, or sponsored product comparisons in the future.
Where you choose to click a commercial partner link or proceed to an external provider from Decidaro, partner networks or affiliate tracking platforms may process referral identifiers, click timestamps, and destination data to verify commercial attribution. Any personal data you submit directly to third-party merchant or partner sites is governed entirely by their respective privacy disclosures.
12. Legal bases where applicable
Where data protection laws (such as the UK GDPR or European standards) require a formal legal ground for processing personal information, Decidaro relies on:
- Legitimate interests: Operating, diagnosing, and securing our platform, maintaining service integrity, preventing fraudulent abuse, and evaluating non-sensitive calculation performance, where such interests do not override your privacy rights.
- Consent: Deploying optional analytics, advertising technologies, and similar non-essential tracking where required by applicable law. Consent may be withdrawn at any time.
- Legal obligation: Complying with applicable statutory, regulatory, or lawful compliance requirements where applicable.
- Contractual necessity: Only where a future service or feature genuinely involves a contract or requested pre-contractual steps with you.
13. International data transfers
Information processed through Decidaro may be stored and processed on servers and cloud infrastructure located outside your country of residence. Third-party infrastructure and service providers may process information in countries where they or their subprocessors maintain facilities.
Where applicable data protection laws require specific cross-border transfer mechanisms, Decidaro will implement legally required transfer instruments and safeguards where applicable.
14. Data retention
Personal and technical information is retained only for as long as reasonably necessary to fulfill the specific purposes outlined in this Policy, or as required by operational, security, and statutory obligations:
- Server access, security, and error logs are retained on standard rotating operational cycles before automated deletion or anonymization.
- Aggregated analytics metrics, where enabled, are stored according to configured retention periods (e.g., standard Google Analytics retention windows) and do not identify individual users.
- Email correspondence sent to our support or legal desks is retained only as long as necessary to address the inquiry and maintain an auditable record of regulatory compliance.
15. Security
Decidaro employs commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, alteration, or disclosure.
All web traffic across Decidaro is encrypted in transit using modern Transport Layer Security (TLS/HTTPS). Server hosting environments leverage access controls, isolated execution containers, and firewall monitoring. However, no internet transmission or electronic storage architecture can be guaranteed completely invulnerable. Users should always exercise personal caution when transmitting information online.
16. Regional privacy rights
Depending on your country, province, or state of residence, you may hold statutory privacy rights under regional data protection laws:
United Kingdom (UK GDPR & Data Protection Act 2018)
UK residents have the right to access their personal data, rectify inaccuracies, request erasure (“right to be forgotten”), restrict processing, object to processing based on legitimate interests, request data portability, and withdraw consent where processing relies on consent. UK residents also hold the right to lodge a complaint with the UK supervisory authority: the Information Commissioner’s Office (ICO) at ico.org.uk.
United States (State Privacy Laws)
To the extent an applicable US state comprehensive privacy statute (such as in California under the CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, or other enacted state frameworks) applies to Decidaro and the specific processing or request, residents of those states may have the right to:
- know and access the categories and specific pieces of personal information collected
- request deletion of personal information, subject to statutory exemptions
- request correction of inaccurate personal information
- opt out of the “sale” of personal information, “sharing” for cross-context behavioural advertising, or targeted advertising where applicable
- not receive discriminatory treatment for exercising their statutory privacy rights
Decidaro does not sell personal information in exchange for monetary consideration. Where applicable state laws apply and third-party advertising cookies or cross-context tracking operate in the future, eligible visitors may exercise available opt-out rights through our consent controls or by emailing legal@decidaro.com.
Canada (PIPEDA & Provincial Frameworks)
Canadian residents are entitled under PIPEDA and applicable provincial privacy legislation to request access to personal information held about them, challenge its accuracy and completeness, request necessary amendments, and withdraw consent to information collection or processing subject to legal or contractual restrictions.
United Arab Emirates (Federal Decree-Law No. 45 of 2021)
Under the UAE Personal Data Protection Law (PDPL), data subjects residing in the UAE hold the right to obtain information regarding the processing of their personal data, access their data, request correction or completion of inaccurate records, request erasure of data under statutory grounds, restrict or cease processing in specified circumstances, object to automated decision-making, and withdraw previously granted consent.
To exercise any of these regional rights, please submit your request to legal@decidaro.com. We will review and respond to verifiable requests within the timeframes mandated by applicable law.
17. Third-party websites
Decidaro may contain hyperlinks to third-party websites, market resources, commercial partners, or regulatory authorities.
We do not control and are not responsible for the privacy practices, content, or security standards of third-party websites. When you leave Decidaro, we encourage you to read the privacy policy of every website you visit.
18. Children
Decidaro is a general decision-support service intended primarily for adults. It is not specifically directed to children.
If you are below the age of legal majority where you live, you should use Decidaro only with the involvement of a parent or legal guardian where appropriate.
Decidaro does not knowingly collect personal information from children in circumstances prohibited by applicable law. If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete or otherwise handle that information as required.
Parents or legal guardians with privacy concerns may contact legal@decidaro.com.
19. Policy updates
This Privacy Policy may be updated periodically to reflect improvements to Decidaro’s tools, changes in hosting infrastructure, activation of analytics or advertising services, or evolving international legal requirements.
Any revisions will be posted on this page with an updated revision date. We encourage visitors to review this Policy periodically to remain informed about our privacy practices.
20. Contact
If you have questions, comments, concerns, or wish to exercise statutory privacy rights regarding this Privacy Policy or Decidaro’s information practices, please reach out to our legal and privacy desk:
Privacy & Legal Desk
legal@decidaro.com