Last updated: October 4, 2026
Debt Sunset (“Debt Sunset”, “we”, “us”) runs debtsunset.com, a calculator and planning tool for tracking credit card and loan debt and planning a payoff schedule. This policy explains what information we collect, why we collect it, and the choices you have. We have tried to write it in plain English.
The short version: we collect only what we need to run your debt tracker. We never ask for your bank logins or card numbers, and we never connect to your bank. Your debt data is encrypted at rest. If you turn on the optional daily briefing, your debt figures (never your name, email or account numbers) are sent to an AI provider, Groq, to write it; it is off unless you turn it on. We do not sell your personal information. We do not use advertising or analytics trackers. Our articles are free to read without an account.
Who this service is for
Debt Sunset is offered only to people located in the United States and its territories (see our Terms of Use). It is not directed at, marketed to or intended for people in the European Union, the European Economic Area, the United Kingdom, Switzerland or other countries, and we do not knowingly accept accounts from them. Our servers are located in the United States.
Information we collect
Account information
To use the debt tracker you need an account. We store your email address, a username generated from it, and, if you choose to give one, your name. There is no password: you sign in with a one-time link we email to you. We also keep your account’s status, such as when your free trial started and whether you have bought Lifetime access.
Debt information you enter
You choose what to enter, such as card or loan names, balances, interest rates (APRs), credit limits, minimum payments, due dates, your payoff plan and payment history. We use this only to calculate your payoff plans, charts and reports. This information is encrypted at rest in our database.
We do not ask for, and you should not enter, full card or account numbers, bank login credentials or your Social Security number. Debt Sunset does not connect to your bank or card accounts.
Optional AI daily briefing
The daily briefing is off by default. If you turn it on, each time a new briefing is written we send these figures from your tracker to our AI provider, Groq: the names of your cards and loans (as you entered them), balances, interest rates, credit limits, minimum payments, due dates, your payoff plan and strategy, this month’s payments, the debts you have paid off, and what changed since your last briefing. An AI model uses them to write your briefing.
By email, if you choose. When you turn the briefing on, you can also have it emailed to you each morning (this is ticked when you turn the briefing on, and you can untick it). The email contains your briefing, which includes figures from your tracker, such as balances and payment amounts, and is sent to your account email address through Amazon SES. Like any email, once delivered it is stored by your email provider. Every briefing email has a one-click unsubscribe link, which stops the emails without changing anything else.
We never send your name, email address, account numbers or account digits, phone numbers or addresses. We keep your briefings, so you can look back at past days, encrypted with the rest of your debt data; for the latest one we also keep the figures it was written from. The briefing is general information written by an AI from your own figures; it is not financial advice and it can be wrong.
You can turn the briefing, or just the emails, off at any time in your account settings. Turning the briefing off deletes all your stored briefings and stops anything more being sent to Groq or emailed to you.
API tokens
If you create personal API tokens, we store only a scrambled (hashed) form of each token, its name, and when it was created and last used.
Information collected automatically
Like most websites, our servers and our security provider record basic technical information when you visit, such as your IP address, the approximate country it comes from, your browser type, the pages you request, and the date and time. We use this to keep the site secure, prevent abuse, fix problems and make sure new accounts come from the United States and its territories.
Payments
Payments are processed by PayPal. We receive a confirmation of the payment, such as the transaction ID, amount, currency and status, and link it to your account. We do not receive or store your card or bank details. PayPal’s handling of your information is governed by PayPal’s privacy statement.
Cookies
We use only cookies that the site needs to work:
- a session cookie, set when you sign in, which keeps you signed in;
- security cookies that our content delivery and security provider (Cloudflare) may set to protect the site from bots and abuse;
- on the checkout page only, PayPal may set its own cookies to process your payment.
We do not use advertising cookies or third-party analytics trackers. If that ever changes, we will update this policy first.
Service providers
We use a small number of providers, and share information with them only as needed for them to do their job:
- Amazon Web Services: hosting of our site and database in the United States, and sending our emails (sign-in links, account messages and, if you turn them on, daily briefing emails) through Amazon SES.
- Cloudflare: content delivery and security. It processes your IP address and request information.
- PayPal: payments, as described above.
- Groq: only if you turn on the optional daily briefing, Groq runs the AI model that writes it and receives the figures described above. According to Groq’s documentation, it does not retain this data by default, but may log requests for up to 30 days to troubleshoot errors or investigate suspected abuse. Groq’s handling of the data is governed by its own terms and privacy policy.
- jsDelivr: some pages load a charting library (Chart.js) from this public content delivery network, which receives your IP address and standard request information.
We do not currently use affiliate links. If we add them, the articles that contain them will say so clearly, and we will update this policy.
How we use your information
- To provide the debt tracker, calculations, charts, reports and API.
- To write your daily briefing, only if you have turned it on.
- To review and approve new accounts, manage your account and free trial, and process your purchase.
- To send sign-in links and important service messages, such as account approval, security or policy updates. We do not send marketing email.
- To email you your daily briefing, only if you have turned the email on.
- To keep Debt Sunset secure and prevent fraud or abuse.
- To comply with legal obligations.
We do not use the debt information you enter for advertising, and we do not sell, rent or share your personal information for advertising. Sending figures to Groq to write a briefing you asked for is not a sale of your information.
When we share information
We share information only:
- with the service providers listed above, and only as needed for them to do that work;
- when required by law, such as in response to a valid court order;
- to protect the rights, safety or security of Debt Sunset, our users or others;
- as part of a merger, sale or transfer of the service, in which case this policy would continue to apply to your information.
If you connect third-party tools to your account with an API token (for example, an AI assistant or an automation service), you choose what they can access, and their use of your data is governed by their own terms.
How long we keep information
We keep your account and debt data for as long as your account exists. When an account is deleted, its debt data is deleted with it, including your stored daily briefings. If you turn the daily briefing off, your stored briefings are deleted at once. If you ask us to delete your account, we will do so within a reasonable time, except where we need to keep limited records for legal, security or accounting reasons (for example, payment records). If email to your address permanently bounces, we may delete the account automatically. Server logs are kept for a limited period and then deleted.
Security
We use reasonable safeguards to protect your information, including encrypted (HTTPS) connections, encryption of your debt data at rest, email-link sign-in instead of passwords, and hashed API tokens. No online service can guarantee perfect security, so please keep your email account secure and your API tokens private.
Your choices and rights
You can view and update the information in your tracker at any time, and download your creditors and reports as spreadsheets. You can also contact us to:
- request a copy of your personal information;
- correct inaccurate information;
- delete your account and personal information.
Residents of some U.S. states, such as California, may have additional rights under state law. We will honor applicable requests, and we will not treat you differently for exercising your privacy rights. We do not sell or share personal information as those laws define it.
Children
Debt Sunset is intended for adults (18 and older) and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has given us information, please contact us and we will delete it.
Changes to this policy
We may update this policy as Debt Sunset changes. When we do, we will update the date at the top of this page, and for significant changes we will provide more prominent notice.
Contact us
Questions or requests about your privacy? Email [email protected].