RateGapevery home loan rate lenders publish, compared
What this site collects
The short version: nothing about visiting, and only what you choose to send.
Visiting
No cookies. No accounts. Page visits are counted by
GoatCounter, which sets no cookie, keeps no IP address
and cannot follow you between sites. It is told the page's name and title, and the campaign
tag on the link you followed if it carried one (such as utm_campaign).
On the front page and the answer page it is also told what you tap, by name only. On the front page, that is whether the form was started and sent, never what was typed. On the answer page, that is which kind of answer you got, such as a small gap or a good rate, but never its figures. It is also which sections you opened, whether you copied the words for a message or a call, and whether you shared the result. And it is told how a reported request went, and whether you started an alert. Never a number, never a lender, never anything you typed.
The loan details you type sit in the address bar of your own browser. This site strips them out of the page name, the title and the link you arrived by, before the counter ever sees any of them.
Those details are used to build the page you asked for. They are not stored against you. This site keeps no record of who visits.
One thing is kept, anonymously. When a comparison produces a result, one row is kept. It records the loan type, the balance rounded to the nearest $100,000, the size of the gap found, and whether a lender was named. It never records which lender, never the rate and never the property value, and nothing that identifies a person. It exists so the tool can learn how often borrowers are actually overpaying. It cannot be traced back to anyone.
If you tap how your request to your lender went, that answer is kept the same way. It records the answer, the loan type, the balance to the nearest $100,000 and the size of the gap. Never the lender, never the rate.
The share button hands your phone one sentence and the link to the front page. The sentence carries one dollar figure and nothing else from your loan. It goes through your phone's own share menu, not through this site.
The site runs on Cloudflare, whose infrastructure handles the traffic. Beyond the page count above, this site adds no tracking of its own. Nothing here follows you anywhere else.
The feedback box
Whatever you type is kept in this site's database and forwarded to my inbox. That is your message, plus your email and name if you give them. It is forwarded by Web3Forms, a form relay service, which processes the submission in order to deliver it. Which page you sent it from travels too. That is the page's name only, never the figures on it. If you tick the box to include your figures, the numbers from your comparison travel with it: balance, rate, property value and loan type. That box is off by default. Left unticked, they are not sent.
Messages are deleted once dealt with. They are swept from the database automatically after 90 days either way. If you gave an email address, it is used to reply to you and for nothing else. No list, no marketing, no passing on.
The services this site is built on run on infrastructure outside Australia. Those are Cloudflare, which hosts the site and its database, Web3Forms, and Stripe. So what you send is stored and processed overseas under those services' own terms. Cloudflare also keeps short-lived operational logs of requests for debugging. This site does not use them to identify anyone.
Rate alerts
If you set up an alert, your email address and loan details are kept so they can be checked against each day's published rates. An alert set up from the answer page also sends one check-in, two weeks after you confirm, asking how your request to your lender went. It says so before you press the button. Nothing is watched until you click the confirmation link. If that link cannot be sent, nothing is recorded. An unconfirmed request is deleted after 7 days. Every email carries an unsubscribe link, and unsubscribing deletes the record. Not marks it. Deletes it. Alert email is delivered by Resend, a mail service that processes the address in order to send.
There is a daily limit on how many messages one address can be sent. It stops this site being used to mail people who did not ask for it. Counting them keeps a one-way fingerprint of the address written to. It is not the address, and nothing is kept beside it. It is deleted within two days.
The coffee link
It goes to a payment page hosted by Stripe. No card detail, name or address from that page ever touches this site. Stripe processes the payment on their own infrastructure, under their privacy policy.
Seeing or deleting what you sent
Ask through the feedback box on the main page, from the address you used. Anything held about you will be shown to you or deleted, whichever you ask for.