Skip to content

Your privacy matters

Privacy Policy

Short version: we don't collect anything. This page explains it properly — including what Google's ad system does.

Last updated: September 29, 2026

1. Who we are

RAP vs IBR ("we", "our", "the site") is an independent website that provides free federal student loan calculators and educational content. We are not affiliated with, endorsed by, or connected to the U.S. Department of Education or any federal agency.

2. Information we collect ourselves

None. The site has no accounts, no sign-up, no newsletter, and no on-site forms that store data. All calculators run entirely in your browser (client-side JavaScript) — the numbers you type are never transmitted to, or stored by, us. They stay on your device and disappear when you leave the page.

3. Hosting, fonts, and edge delivery

The site is hosted on Laravel Cloud with Cloudflare in front. Cloudflare may process request metadata (such as IP address, user-agent, and URL) to deliver pages from the edge, absorb abuse, and keep the site available. See Cloudflare's privacy policy.

We self-host a small subset of the Newsreader and Source Sans 3 webfonts through the Vite build. Those font files are served from this site; we do not load fonts from Google Fonts at runtime, so visiting the site does not contact fonts.googleapis.com for text.

4. Cookies and third-party advertising

When advertising is active on this site, we may display ads served by Google AdSense. As an authorized Google advertising partner, Google and its partners use cookies to serve ads based on your prior visits to this and other websites, and to measure ad performance.

These cookies may be used for personalized advertising. You can opt out of personalized advertising at any time by visiting Google's Ads Settings or the AboutAds opt-out page.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

For visitors in the European Economic Area, the United Kingdom, and Switzerland, we will use a Google-certified consent management platform (CMP) through AdSense Privacy & messaging so you can accept or reject advertising and non-essential cookies before ads that require consent are served. Until that CMP is live, we do not treat your visit as consent for personalized ads in those regions.

5. Analytics

We count page views with a first-party beacon that sends only the page path and the referrer host. There is no analytics cookie, no advertising identifier, and no third-party analytics script. The server stores a daily-rotating hash of IP address plus user agent (the salt changes every UTC day and old salts are deleted), never the raw IP or full user agent, so visits cannot be linked across days. This is for our own traffic reports in a private admin panel. If we enable Google Analytics in the future, that would be a separate, cookie-based system and we would update this page before turning it on.

6. Your rights (GDPR & CCPA)

Residents of the EU/EEA and California have rights regarding personal data. The first-party analytics described above do not store information that identifies you, and hashes are not linked across days. For cookie-related choices made by third-party advertisers:

7. Third-party links

Our pages link to official resources (such as StudentAid.gov, HHS, and tax authorities) for your convenience. We are not responsible for the privacy practices of external sites.

8. Children's privacy

The site is intended for adults and does not knowingly collect data from children under 13. This site is not directed at children.

9. Contact

Questions about this policy? Reach us via the Contact page.

10. Changes to this policy

We may update this page as features change. The "last updated" date above reflects the latest revision.