Privacy policy

Who the data controller is

The controller of the personal data described in this policy is:

Diego Bernabeu
trading as WorkPay Ireland
144 Wellpark Grove
Galway
Ireland

Email: diego.bernabeu.martinez@gmail.com
Telephone: +353 83 168 4976

WorkPay Ireland is a trading name. The site is maintained by one person; it is not an incorporated company and does not present itself as one.

What data is handled

The calculators run entirely on your device. The amounts, hours and dates you type are worked out in your browser and are not sent to any server, including ours. You can use them with no account and without us knowing you exist.

The site does have a server, and it is used by the parts that cannot work without one: accounts and sign-in (Supabase), Premium payment (Stripe), the history saved to your account, and the payslip analyser. None of those switch themselves on: each needs your data and your decision.

The private keys for those services live only in the server's environment variables. They are not in the HTML, not in the JavaScript your browser downloads, not in the public configuration response, and not in any log.

Anything you keep with the Save button is stored in your browser's local storage. You can delete it yourself from your dashboard or through your browser settings.

Payslip analyser (Premium)

This is the only part of the site that sends anything off your device, and it only happens if you deliberately upload a document.

What is processed: your payslip file (image or PDF) and whatever it contains: your name, employer, amounts, and possibly your PPSN, IBAN and address.

What for: solely to read it and return your analysis. Nothing else.

Who is involved: the document is sent to Anthropic (Claude), which processes it and returns the extracted data. Anthropic does not use API request content to train its models.

How long it is kept: the file is not stored. It is processed in memory and discarded when the analysis finishes, whether it succeeds or fails. No copy remains on our servers.

The analysis: it is saved only if you press "Save analysis". It is then tied to your account, already redacted, and kept until you delete it. You can delete them one at a time or all at once from your dashboard.

Redaction: your PPSN, IBAN, address, employee number and name are hidden on the server, before they reach your browser. Neither a screenshot nor a saved analysis contains those in full.

What we do not do: nothing is sent to analytics or advertising, no ads are shown on that screen, and your payslip content never appears in any log of ours.

Your responsibility: only upload documents you have the right to upload. Do not upload someone else's payslip without their permission.

Not advice: the analysis is informational. Confirm anything you are unsure about with payroll, with Revenue, or with a professional.

Cookies and storage

This site sets no cookies of its own. Not for the session, not for measurement, not for anything else. What we use is your browser's local storage, which does not travel with every request and does not leave your device.

There are nine keys, and every one of them is listed — with its purpose, how long it lasts and whether it is essential — on the cookie policy. There are no others: the list is checked automatically against the code on every release, and if anyone added a key without documenting it, that check fails.

Third parties can set cookies: Google, if you accept advertising, and Stripe while you are on their payment page, which is their domain and not ours.

Google advertising

When advertising is active and the necessary consent exists, this site shows ads served by Google through AdSense.

What Google may do. Google and its advertising partners may use technologies such as cookies, local storage, your IP address, device identifiers and web beacons or equivalents to serve ads, measure their performance, prevent fraud and abuse and, where the applicable consent exists, personalise them. That means third parties may set or read cookies and identifiers in your browser as a result of the advertising.

Google sets out in detail what information it collects from sites that use its services, and why, in "How Google uses information from sites or apps that use our services".

Who decides advertising consent. In the EEA, the UK and Switzerland, consent for advertising is handled by Google's own consent message (the CMP published from AdSense). We do not fabricate, impersonate or override that signal: our own cookie panel only decides whether Google's script is loaded at all, and it is always the more restrictive of the two.

Personalised or not. If you accept personalised advertising, Google may use what it knows about you to choose the ad. If you do not, you get non-personalised ads: they still appear, but they are chosen from the page content and your approximate location, not from a profile of you. That choice is handled by Google's consent message and you can change it whenever you like.

When nothing loads. The AdSense script is not in the HTML of these pages: our JavaScript inserts it, and only if five conditions hold at once: advertising is switched on server-side, an AdSense ID exists, you are not a Premium subscriber, you have accepted advertising in our panel, and the page has a real ad slot. If any one fails, your browser makes no request at all to Google.

What is in the HTML. A <meta> tag carrying our AdSense publisher ID. It is the method Google offers for proving the site is ours without loading their script, and it is only text: it downloads nothing, asks Google for nothing and sets no cookie. You will see it if you view the page source; you will not see a single network request from it.

Rejecting is one click, exactly like accepting, and you can change your mind from "Manage cookies". With Premium, no advertising is loaded under any circumstances.

There is no advertising on the payslip analyser screen, not even with consent: we do not want third-party scripts on a page that shows your pay.

Your rights

The GDPR gives you rights of access, rectification, erasure, restriction, objection and portability. For the calculators, which send nothing, you exercise those rights by clearing your browser's local storage from your dashboard.

For saved payslip analyses and your account, which do live on a server, you can download them, delete them one at a time, or delete all of them from your dashboard. If you would rather ask in writing, email the contact address.

If you believe your rights have been infringed you can complain to Ireland's Data Protection Commission.

Changes

If this policy changes, the update date changes with it.