Privacy

Reading the site

You can read every page and use every tool without telling us who you are. The refinance check and the estimator run in your browser: your rate, balance and home value are never sent to us. We run no analytics and no advertising today; this page will say when that changes.

If you choose a state in the estimator, your browser keeps that choice in its own storage on your device. Clearing this site's data removes it.

If you save a rate alert

You save an alert by signing in with Google. It keeps what it needs to watch your trigger, and nothing more:

• the email address Google has verified for your account;
• the alert: your trigger rate, the new loan (a 30- or 15-year fixed), your state, your credit score band and your loan-to-value band;
• the identifier Google gives your account, so we know you when you sign in again.

We never keep your current rate, your balance, your home's value, your name or anything else Google holds: we ask Google only for your email address. We keep no record of when you signed up.

We use the alert only to tell you when today's estimate for you reaches your trigger. We send no email yet. When email alerts start, every one will carry a one-click unsubscribe.

Cookies

Only Google sign-in sets cookies, and only this site's server can read them: no script, and no other site.

• __Host-rate-watch-google-sign-in, for the ten minutes you may spend at Google, so we can check that the answer coming back belongs to the sign-in you started.
• __Host-rate-watch-session, for 30 days, so you can see and change your alert. We keep a fingerprint of it, not the cookie itself. Signing out or deleting your alert ends it.

We set no advertising, analytics or tracking cookies.

Who handles it

Cloudflare hosts this site and the database that holds alerts, on our behalf. Google signs you in when you save or open an alert, and tells us your verified email address. We do not sell your information, and we do not share it with lenders, advertisers or anyone else.

Seeing, changing and deleting your alert

Open your alert by signing in with the Google account you used. There you can change it, or delete it with your email address. Deleting takes effect at once. Our database host keeps a recovery history that holds a deleted alert for up to 30 days, which we cannot switch off; after that, no copy remains.

If you lose access to that Google account, you can no longer open the alert here. Once email alerts start, every alert will carry a one-click unsubscribe.