Casita
◆ Legal · Privacy

Your data barely exists here.

Every calculation in Casita runs on your device. There is no server storing your scenarios, no account to open, no newsletter to join. Here is the little we do touch — and how to exercise your privacy rights, including the California opt-out, if you want even less.

Last updated: April 18, 2026

Who we are

Casita is an independent project operated by Ignacio de Navas, based in Madrid, Spain. Reach us at hola@casitacalc.com. The site is casitacalc.com.

What we do not collect

Casita never asks for your email, phone, name, SSN, ID, or income documentation. There is no sign-up, no login, and no contact form inside the product. Mortgage, amortization, and affordability calculations happen entirely in your browser: the numbers you type never leave your device.

Your saved scenarios (up to ten) and your rate alerts live in your browser's localStorage, a private corner of your own device. Clearing site data removes them.

What we do process

1. Hosting — Vercel Inc.

The site is served from Vercel (United States). Like any web server, Vercel processes for a short time the IP address making the request plus a minimal technical log (user-agent, path, HTTP status) for the legitimate interests of security and abuse prevention.

2. Advertising — Google AdSense

The bottom banner is served by Google AdSense (ca-pub-3520944080867015). AdSense may drop cookies such as IDE, NID, and DSID for ad delivery, frequency capping, and measurement. If you have not opted into personalized ads, the ads you see are non-personalized (contextual): they are chosen based on the page, not your history.

3. Market data — public APIs

To show live mortgage rates, Casita's server queries public APIs (Freddie Mac PMMS, FRED, and country-specific central banks). These calls are made on the server; the data provider never sees who you are.

California residents — CCPA / CPRA

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), residents of California have the right to know what personal information is collected, the right to delete it, and the right to opt out of the sale or sharing of personal information.

Casita does not sell personal information for money. However, because we serve interest-based ads through Google AdSense, under the CPRA's broad definition of "share" this behavioral advertising may qualify as sharing.

To opt out, use the "Do Not Sell or Share My Personal Information" link in the site footer, or set your browser to send the Global Privacy Control (GPC) signal. We honor GPC automatically for visitors detected in California. You can also email hola@casitacalc.com with the subject line CCPA opt-out and we will confirm within 15 business days.

California residents may also exercise the right to know, correct, delete, limit the use of sensitive information, and to non-discrimination for exercising these rights. Contact us through the address above to submit a verifiable request.

Categories of personal information (past 12 months)

  • Identifiers: IP address, device identifiers generated by AdSense cookies. Source: you visiting the site. Purpose: security, ad serving.
  • Internet activity: page URL requested, referrer, user-agent. Source: your browser. Purpose: diagnostics and ad relevance.
  • Inferences drawn by AdSense for personalized ads (only after opt-in). Purpose: ad personalization. Opt-out honored as above.

Other state privacy laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) have equivalent rights to opt out of targeted advertising. The same footer link and GPC signal cover these states. Email us to submit a verifiable consumer request.

Cookies and similar tech

Casita does not use first-party analytics cookies or browser fingerprinting. The only cookies on the site may come from Google AdSense. Full detail on the cookies page.

The PWA uses a Service Worker for offline support; it does not transmit data, it only caches static assets already served to your device.

Retention periods

  • Vercel technical logs: up to 30 days.
  • AdSense cookies: between 30 days and 13 months depending on the cookie (see Google's policy).
  • localStorage scenarios and alerts: persist in your browser until you clear site data. Casita has no remote access to them.

Your rights

To delete everything Casita stores on your device, open Settings → Privacy → Site data in your browser and remove casitacalc.com. That clears scenarios, alerts, country preference, and any AdSense cookies in a single click.

For any other request, email hola@casitacalc.com. We respond within 30 days (15 business days for CCPA requests).

Children's privacy

Casita is not directed to children under 13 and does not knowingly collect personal information from children. If you believe a child's data has reached us, contact the address above and we will remove it promptly.

Changes to this policy

Updates are posted on this page with a new Last updated date. Material changes are announced in the site footer for 30 days. This version supersedes any prior one.