Your numbers stay yours.

Everything you enter into the Fireworks planner—including ages, salary, asset pot balances (ISA/GIA/SIPP, Plan de Pensiones/PIAS, 401k/IRA), contribution schedules, and spending targets—is saved locally on your device in your browser's client storage (localStorage and indexedDB).

Your numbers do not transmit to our servers by default. Clearing your web browser cache or local application data completely purges all plan figures from your device.

Fireworks uses Umami Analytics to collect aggregate, anonymous statistics about site usage (such as page views, region selector interaction, and plan creation flow starts).

• Zero Cookies & Zero Storage Identifiers: Umami operates without setting any HTTP cookies, localStorage keys, or sessionStorage identifiers.
• No Fingerprinting or Re-identification: We do not track unique user sessions, run browser fingerprinting, or attempt user re-identification.
• Anonymized Processing: IP addresses are never stored in a personally identifiable form. Aggregate metrics are measured based on legitimate interests (Art. 6(1)(f) GDPR / UK GDPR) to improve product performance without intrusive consent banners.

Creating an account is entirely optional. If you choose to sign up so you can access your financial plans across multiple devices, authentication and cloud data storage are securely powered by Supabase (using encrypted connections and database Row-Level Security).

You retain 100% ownership of your stored data. You can inspect, modify, or permanently delete individual saved plans or delete your entire account at any time from your Account Management page. Triggering an account deletion immediately and permanently purges all associated credentials and plan records from our cloud databases.

Fireworks offers two optional AI-assisted tools powered by Google Gemini API:

• Get Tips: When explicitly clicked, sends a summarized, anonymous snapshot of your plan figures (ages, pot balances, spending target, and projected Coast age) to generate retirement optimization suggestions.
• Import with AI: When you paste raw portfolio text or upload a CSV file, the raw text is sent to extract asset classes and fund allocations.

Data Boundary Guarantees: Neither request includes your name, email address, IP address, account token, or any personally identifiable information (PII). Requests are processed via server-side API endpoints transiently in-flight. Under Google Cloud Enterprise privacy commitments, data is not stored permanently or used to train Google AI foundation models.

Fireworks is currently publicly available and operational for the United Kingdom.

A tailored Spain (Spanish / es-ES) implementation—configured for IRPF tax scale, Planes de Pensiones, PIAS, and local retirement regulations—is built into the codebase and currently feature-gated while undergoing final pre-launch testing.

Fireworks is committed to zero commercial data monetization:

• We do NOT use cross-site tracking scripts, Google Ads, Meta Pixels, or third-party marketing cookies.
• We NEVER sell, license, or trade user data or financial profiles to data brokers or advertisers.
• Any performance monitoring (e.g. Vercel Speed Insights) measures aggregated technical asset load times and does not track personal browsing activity or financial inputs.

Under applicable data protection laws (including the UK General Data Protection Regulation / Data Protection Act 2018, EU GDPR, and California CCPA/CPRA), you have statutory rights regarding your personal data:

• Right of Access & Portability: View and export your local or cloud-saved plan data at any time.
• Right to Erasure: Delete local storage in your browser or purge your cloud account from /account.
• Right to Object & Restrict: Refrain from using optional cloud backup or AI features at your sole discretion.

If you have questions, feedback, or data privacy requests regarding Fireworks, you can contact the project maintainers directly:

Email: 1mpersecond@gmail.com
GitHub Repository: github.com/fekwes/myfire.works