Privacy Policy

The short version: You can use the core gilt tools with no account and no personal data. If you create an account we store your email, name and the data you save (watchlist, ladder, portfolio) securely in the EU. Payments are handled by Stripe — card details never reach our servers. We use anonymised analytics, and we never sell your data or share it with advertisers.

You can browse the gilt table, calculator, yield curve, ladder builder and compare tools without giving us anything. We collect data only when you choose to set a price alert or create an account:

• –Email address — for price alerts and account registration
• –Name — for account registration
• –Password — hashed with PBKDF2, never stored in plain text
• –Session tokens — kept in an HttpOnly cookie, expiring after 30 days
• –Portfolio data — gilt holdings, purchase prices and dates (paid accounts)
• –Watchlist items — the gilts you save (paid accounts)
• –Ladder configurations — your saved bond ladder (paid accounts)
• –Price alert preferences — your alert thresholds and conditions
• –Payment information — processed by Stripe; we never store card details
• –Stripe customer ID — stored so we can manage your subscription
• –IP address and browser info — used for rate limiting and security only
• –Analytics data — via Google Analytics, anonymised

Your tax rate and any calculator or watchlist preferences you haven't synced to an account stay in your browser's local storage and are never sent to us. When you're signed in, we also keep a few display hints there — your sign-in state, subscription tier and tax band — so pages render correctly without a network call. These are already held in your account, and they're cleared when you sign out or your session ends.

• –Email — to send your price alerts, account management messages, and occasional product updates (only if you opt in)
• –Portfolio, watchlist and ladder — to display your saved data back to you, and to you only
• –Payment data — to manage your subscription through Stripe
• –Analytics — to understand how the site is used in aggregate, with no personally identifiable data
• –Rate limiting — to prevent abuse; not stored long-term

• –All account data is stored in Cloudflare D1, hosted in the EU region
• –Passwords are hashed using PBKDF2 with 100,000 iterations — we can never see your password
• –Payments are processed by Stripe, which is PCI DSS compliant
• –We do not sell your data to third parties
• –We do not share your data with advertisers

• –Cloudflare — hosting, security and DDoS protection. Privacy policy
• –Stripe — payment processing; Stripe's privacy policy applies to card data. Privacy policy
• –Resend — transactional email delivery (alerts, verification, account emails). Privacy policy
• –Google Analytics — anonymised usage analytics. Privacy policy
• –Hargreaves Lansdown (HL) — gilt price data fetched server-side. You never interact with HL directly.

• –Access — email contact@yieldsmart.co.uk for a copy of your data
• –Deletion — delete your account from account settings, or email us
• –Portability — export your portfolio as CSV from account settings
• –Rectification — update your details in account settings

When you delete your account, your data is retained for 90 days and then permanently removed.

• –ys_session — an HttpOnly session cookie, expiring after 30 days, required for account functionality
• –Google Analytics — anonymised analytics cookies (_ga, _gid)
• –No advertising or tracking cookies — we don't use them

• –Subscriptions are processed and managed by Stripe
• –Your card details never touch YieldSmart servers
• –We store only your subscription status and dates in our database
• –Cancellation — anytime via account settings or by emailing us
• –Refunds — email contact@yieldsmart.co.uk within 14 days

• –The core gilt data tools are available without an account
• –Advanced features — watchlist sync, ladder saving and the portfolio tracker — require a paid subscription
• –Pricing: £3 / month or £29.99 / year
• –A 7-day free trial is available; a card is required to start it

Data controller: YieldSmart. For any privacy question, or to exercise any of your rights above, email contact@yieldsmart.co.uk.

We may update this policy as the service evolves; changes are posted here with a revised date. Last updated: 4 September 2026.