Privacy policy

studentloan.help is an independent website. Contact us through the form on /contact/. This page explains what we ("we" means the people who run studentloan.help) collect when you use the site or send us a message, what we do with it, and what you can ask us to do about it.

StudentLoan.help is independent. It is not affiliated with the U.S. Department of Education, Federal Student Aid or any loan servicer, and it never asks for your FSA ID, Social Security number, loan account numbers or servicer login.

What we collect

The repayment calculator runs entirely in your browser. The loans, income and household details you type into it are not sent to us or anyone else. If you open the question form after using it, a short summary of your result (balances, rate, AGI, household size and the cheapest plan) is kept in your browser tab's session storage so the form can show it to you. It is sent to us only if you submit the form.

The question form (/get-help/) collects the topic you pick, your question, your name and email, and, only if you fill them in, your state, federal and private student loan balances, income, employer type, current repayment plan, whether you have a federal loan made on or after July 1, 2026, and the calculator summary described above.

The contact form (/contact/) collects your name, email and message.

With either form we also receive, in hidden fields: the page you sent it from, the exact consent sentence shown beside the button, any campaign tags (utm codes) in the link that first brought you to the site, and the referring page you came from. Those last two are kept in your browser's session storage while you browse and end when you close the tab. Neither form asks for a phone number.

When you browse, our host, Cloudflare, processes technical information such as your IP address, approximate location, browser type and the pages you request, to deliver the site and protect it from abuse.

We don't use analytics tools, advertising pixels, session recording or tracking cookies. The site sets no cookies of its own.

Where it goes

A form message is stored in a database run for us by Cloudflare (Cloudflare D1) and emailed to the person who runs StudentLoan.help, using Cloudflare's email service. That person reads it and replies by email.

How we use it

To reply to your question, to run the site and keep it secure, to fix mistakes you report, and to meet legal obligations. We don't use what you send for advertising.

Sharing

We don't sell or share what you send. We don't pass it to planners, lenders, refinance companies, debt relief companies, servicers or advertisers. If that ever changes, we will update this policy first and ask for your consent on the form before sharing anything.

The only others who handle it are our service providers, acting for us: Cloudflare, for hosting, the database and email delivery. We may also disclose information if the law requires it (a valid subpoena or court order, for example), to protect the site or its users from fraud or abuse, or to a buyer if the site is sold, in which case we will post a notice here first.

How long we keep it

We delete form messages 24 months after we receive them, sooner if you ask. Cloudflare keeps its technical logs for its own short periods under its own policies.

Your rights

You can ask us what we hold about you, ask us to correct it or delete it, or ask for a copy, through the contact form (choose "Privacy request"). Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with consumer privacy laws have these rights to the extent those laws apply to us. We honor Global Privacy Control signals as a request to opt out of sale or sharing, though we don't sell or share in any case. We won't treat you differently for using any of these rights. If we turn down a request, you can appeal by replying to our answer, and we will look at it again.

Children

This site is meant for adults. It is not directed to anyone under 18, and we don't knowingly collect information from children under 13. If you think a child has sent us information, tell us through the contact form and we will delete it.

Security

The site is served only over HTTPS, and form messages are stored with access limited to the person who runs the site. No system is perfectly secure, which is one more reason the forms never ask for account numbers or ID numbers.

Changes

When this policy changes, we update this page and the date at the top. We won't start sharing what you send without asking you first.

Contact

Questions or requests about privacy: the contact form (choose "Privacy request").