Privacy Policy

Last updated: July 2026 · Effective: January 2026

Effective date: January 15, 2026
Last updated: July 8, 2026

This Privacy Policy explains how WithholdRight ("we," "us," "our," or "the Site"), operating at 1an.site, collects, uses, and protects information when you visit our website, use our multi-state tax withholding calculator, or read our content library. We are committed to being transparent about our data practices and to giving you meaningful control over your information.

By using the Site, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Site. This policy is provided in plain language and is designed to comply with the California Consumer Privacy Act (CCPA), the California Online Privacy Protection Act (CalOPPA), the European Union General Data Protection Regulation (GDPR), and the Children's Online Privacy Protection Act (COPPA).

1. Information We Collect

1.1 Information You Provide Directly

The WithholdRight tax withholding calculator runs entirely in your browser. The numbers you enter — gross pay, filing status, state of residence, employer state, and related inputs — are processed locally by JavaScript on your device. We do not transmit, store, or log these inputs. We have no way to see the specific figures you calculate.

If you contact us by email at contact@1an.site, we receive the email address and message content you provide. We retain these communications for up to 24 months for quality assurance and to respond to follow-up questions, after which they are deleted.

1.2 Information Collected Automatically

When you visit the Site, our servers and third-party service providers automatically record certain technical information, including:

  • Internet Protocol (IP) address (used for security, fraud prevention, and approximate geographic location at the country/state level).
  • Browser type and version, operating system, and screen resolution.
  • Referring URL (the page you visited before arriving at the Site).
  • Pages visited, time spent on each page, scroll depth, and clicks.
  • Cookie identifiers and similar technologies (see Section 4 below).

This technical data is collected to operate the Site, monitor performance, prevent abuse, and aggregate analytics that help us improve our content.

1.3 Information From Third Parties

We do not purchase or rent personal data from data brokers. We may receive aggregated, anonymized analytics from third-party services such as Google Analytics, which help us understand traffic patterns at a population level.

2. How We Use Your Information

We use the information described above for the following legitimate business purposes:

  • Operating the Site: serving pages, processing calculator inputs in your browser, and ensuring the Site functions correctly.
  • Improving content: analyzing which articles and tools are most used, where readers drop off, and what topics deserve deeper coverage.
  • Security and fraud prevention: detecting automated abuse, blocking malicious IP ranges, and protecting the Site from attacks.
  • Displaying advertising: showing relevant ads through Google AdSense and similar networks (see Section 5).
  • Communicating with you: responding to your emails and providing legally required notices.
  • Legal compliance: responding to lawful requests from authorities and complying with our legal obligations.

We do not use your personal information to build a profile for targeted advertising beyond what is permitted by Google AdSense policies and your consent settings. We do not sell your personal information to anyone.

3. Legal Bases for Processing (GDPR)

For visitors in the European Economic Area, the United Kingdom, and Switzerland, we process personal data under the following legal bases:

  • Consent (Article 6(1)(a)): for setting non-essential cookies and displaying personalized advertising.
  • Contract performance (Article 6(1)(b)): for serving the pages you request and operating the Site.
  • Legitimate interests (Article 6(1)(f)): for security monitoring, fraud prevention, and aggregated analytics that do not override your rights.
  • Legal obligation (Article 6(1)(c)): for retaining records required by tax, accounting, or other laws.

4. Cookies and Similar Technologies

The Site uses cookies, web beacons, and similar technologies for the following purposes:

4.1 Essential Cookies

These cookies are necessary for the Site to function. They cannot be disabled in our systems. Examples include cookies that remember your cookie consent choice and protect against cross-site request forgery.

4.2 Analytics Cookies

We use analytics services to understand how visitors interact with the Site. These services may set cookies to track anonymous usage data. You can opt out of analytics cookies through the cookie banner displayed on your first visit or through your browser settings.

4.3 Advertising Cookies

We participate in Google AdSense, which uses cookies and device identifiers to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our Site and other sites on the internet.

  • You may opt out of personalized advertising by visiting Google Ads Settings.
  • You may opt out of third-party vendors' use of cookies for personalized advertising by visiting aboutads.info/choices.
  • For European visitors, we implement Google Consent Mode v2, which adjusts how Google tags behave based on your consent choices.

4.4 Managing Cookies in Your Browser

You can control and delete cookies through your browser settings. Note that disabling cookies may affect Site functionality, and you may need to re-accept the cookie banner on each visit.

5. Google AdSense and Third-Party Advertising

We display advertising through Google AdSense. Google and its partners use cookies to serve ads based on your visit to our Site and other sites on the internet. Specific details:

  • Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites.
  • Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the internet.
  • Users may opt out of personalized advertising by visiting Google Ads Settings. (For EEA/UK users, this is also addressed via Consent Mode v2 on our Site.)
  • Where Google uses cookies for personalized ads, the cookies include a DoubleClick cookie (DSID, IDE, NID) and may include other Google advertising cookies.

Our Site also follows Google's Advertising Cookies Policy and the AdSense policies on user consent.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share limited data in the following circumstances:

  • Service providers: We share data with third-party vendors that provide services on our behalf, such as web hosting, analytics, email delivery, and advertising. These vendors are bound by contractual obligations to protect your data and to use it only for the services they provide to us.
  • Legal compliance: We may disclose information when required by law, court order, or government regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, information may be transferred as part of that transaction. We will notify you via the Site of any change in ownership.

7. Data Retention

We retain server logs containing IP addresses and other technical data for up to 90 days for security and analytics purposes, after which they are aggregated or deleted. Email correspondence is retained for up to 24 months. Analytics data is retained in aggregated form indefinitely. The inputs you enter into the calculator are never retained.

8. Your Privacy Rights

8.1 California Residents (CCPA)

California residents have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to know: the categories and specific pieces of personal information we collect, the sources, the business purpose for collecting, and the third parties with whom we share it.
  • Right to delete: request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to correct: request that we correct inaccurate personal information.
  • Right to opt out of sale or sharing: we do not sell personal information, and you may opt out of "sharing" (targeted advertising) via the cookie banner or by contacting us.
  • Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at contact@1an.site with the subject line "Privacy Rights Request." We will verify your identity before responding.

8.2 European and UK Residents (GDPR / UK GDPR)

Residents of the EEA, UK, and Switzerland have the following rights:

  • Right of access: request a copy of your personal data.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): request deletion of your data in certain circumstances.
  • Right to restrict processing: limit how we use your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent: at any time, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at contact@1an.site. We respond within 30 days. If you are not satisfied, you may lodge a complaint with your local data protection authority.

8.3 Other U.S. State Residents

Residents of states with comprehensive privacy laws — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and others — may have similar rights. Contact us at contact@1an.site to exercise any applicable right.

9. Children's Privacy

Our Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us at contact@1an.site and we will promptly delete it.

10. International Data Transfers

Our Site is hosted in the United States. If you access the Site from outside the United States, your data will be transferred to the United States. We use standard contractual clauses (SCCs) and other appropriate safeguards for transfers from the EEA, UK, and Switzerland. By using the Site, you consent to these transfers.

11. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, regular security reviews, and limited access on a need-to-know basis. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Your Browser's Do Not Track Signal

Some browsers offer a "Do Not Track" (DNT) signal. We currently do not respond to DNT signals because there is no consistent industry standard for how to interpret them. We will update this policy if and when a standard emerges.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will update the "Last updated" date at the top of this page whenever we make changes. Material changes will be noted on the Site. We encourage you to review this policy periodically.

14. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy inquiries within 5 business days.