Privacy

Last updated October 9, 2026

In short: your statement file is read only inside your browser and is never uploaded, sent or stored. There are no accounts, no cookies and no tracking code. Visit counts come only from Cloudflare’s ordinary server records of page requests.

Your statement file

• When you choose your statement XML file, paste its text, or try the sample, the page’s own code reads it inside your browser. The file, and everything in it (your name, date of birth and earnings), is never uploaded, sent to ssn.tips or anyone else, or stored.
• Nothing is saved in your browser either: no cookies, no local storage. Anything you type into the page, such as a date of birth or a benefit estimate, stays in that browser tab and is gone when you reload or close it.
• The page’s security rules (its Content Security Policy) only let it load files from, and connect to, ssn.tips itself. Your browser enforces those rules, so even by mistake the page can’t send your data to another site.
• The only file the page asks the server for after it loads is the sample statement, and only when you press “Try it with sample data”.

No accounts, cookies or tracking code

• There is nothing to sign up for or log in to.
• The site sets no cookies.
• No analytics, advertising or other outside code runs on the page. Every script, style sheet, image and chart library is served from ssn.tips.
• ssn.tips never asks for your Social Security number, and the statement file doesn’t contain it.

How visits are counted

ssn.tips is hosted on Cloudflare Pages. Like any web host, Cloudflare receives each request your browser makes for a page or file, along with the ordinary details every browser sends, such as the address requested and your IP address. The visit counts we look at come only from Cloudflare’s standard traffic statistics built from those requests. They never include your statement file, your earnings or anything you type, because none of that leaves your browser. Cloudflare handles request data under its own privacy policy.

The optional debug log

If you add ?debug=1 to the address, the page shows a log of the upload steps under the upload box, to help track down a file that won’t load. The log is shown only on your screen. It is never sent or saved, and it never contains your file’s name (only its ending, such as .xml) or its contents.

Buy Me a Coffee and other links

The “Buy me a coffee” links open buymeacoffee.com, a separate site with its own privacy policy. Nothing from your statement is passed to it, and the links don’t tell it which page you came from. The QR code on the printout is an image served from ssn.tips. Links to ssa.gov and the data sources open those sites, which have their own policies.

Changes

This page describes what the site’s code does today. If that changes, for example if a way of counting visits is added, this page will be updated first and the date above will change.