Privacy

HomeLoans.fyi exists to show real mortgage rates without asking people to give up their privacy to do it. This page describes exactly what we collect and what we do with it — not a generic template.

What you can submit

When you submit a rate, you can share:

• Required: lender, rate type, interest rate, the date you locked, your state, and a credit score range (never your exact score — we don't collect it).
• Optional: APR, loan amount, down payment %, points, loan purpose/type, annual income, DTI ratio, employment type, property type/use, ZIP code, and free-text notes.

We never ask for your name, email address, phone number, or any account. There is no login. There is nothing that identifies you as a person anywhere in the submission form.

What we don't do with it

• We don't sell or share submissions with lenders, data brokers, or advertisers.
• We don't use credit score, income, or any other field to try to identify or contact you — there's no way to, since we never collect identifying information in the first place.

Where the rate data comes from

Some rates on this site are borrower submissions through the form above. Others are sourced from the Home Mortgage Disclosure Act (HMDA) dataset — a public, federally mandated record of real mortgage originations, published annually by the CFPB specifically for this kind of public reuse. HMDA rows reflect real loans, but weren't submitted to us directly by the borrower, and the public HMDA file doesn't include an exact credit score, only the loan's reported year (not the exact date), so those fields are approximated or left blank on HMDA-sourced rows. We label these distinctly wherever they make up a meaningful share of what's shown, and we never count them toward a claim of "from real borrowers" — that phrase always means someone submitted it to us directly.

Location

The homepage shows a "near you" suggestion by reading a coarse, state-level location signal that our hosting provider (Vercel) derives from your IP address at the network edge. This happens per-request and isn't stored anywhere — we don't log or retain your IP-derived location.

What we store technically

• Your browser's local storage: a flag noting you've submitted a rate before, so you don't see the same "submit to unlock" prompt twice. Nothing else. It never leaves your browser and we can't read it.
• A hashed IP, temporarily: to prevent spam, we keep a salted, one-way hash of the IP address behind a submission for a few minutes, purely to detect "too many submissions too fast." The raw address is never stored, and the hash can't be reversed back into one.
• Anonymous usage analytics (via Vercel Analytics) — aggregate page-view counts, not tied to any individual submission or identity.

Infrastructure

The site runs on Vercel (hosting) and Supabase (database). Both process data on our behalf under their own standard infrastructure agreements; neither has any independent right to use submitted data for their own purposes.

Questions

If anything here is unclear, or the site is doing something this page doesn't describe, that's a bug in this page and we want to know about it.