Privacy policy
Effective October 28, 2026
401kGrade (401kgrade.com) is a free, static website operated by Gary Harka Jr, an individual based in Bethlehem, Pennsylvania ("we," "us"). This policy explains what information is collected when you use the site and how it's used. The short version: you can use 401kGrade without creating an account or telling us who you are, we don't sell personal information, and we don't run advertising trackers.
Information collected when you browse
Hosting (Cloudflare). The site is hosted on Cloudflare Pages and served through Cloudflare's network. Like any web host, Cloudflare processes technical information needed to deliver pages and protect the site, such as your IP address, browser type, the pages and files requested, referring site, and the date and time. Cloudflare may set strictly necessary security cookies to detect bots and abuse. We use Cloudflare's aggregate traffic statistics (for example, page views and visitors by country) to understand how the site is used. We don't use these statistics to identify individual visitors. See Cloudflare's privacy policy.
Employer search. The search box runs in your browser. To show results, your browser downloads a small slice of the plan index from our site based on the first letters of a word you type. What you type isn't sent anywhere else or stored by us, though the file request is handled by Cloudflare like any other page request.
We don't use Google Analytics, advertising networks, or social-media tracking pixels. Fonts and styles are served from our own site.
Newsletter (Beehiiv)
If you sign up for the 401kGrade newsletter, your email address (and any information you choose to provide) is collected and stored by our newsletter provider, Beehiiv. We use it only to send the newsletter and related updates. The signup form, and a small Beehiiv script on our pages that records which page a signup came from, are loaded from Beehiiv's servers and are subject to Beehiiv's privacy policy. Beehiiv may measure whether newsletter emails are opened and links are clicked. Every email has an unsubscribe link, and you can ask us to delete your subscriber record at any time.
Affiliate links and cookies
Some links on 401kGrade may be affiliate links (see our disclosure). If you click one, the partner company or an affiliate network (such as Impact or FlexOffers) may set cookies or use similar technology in your browser so it can credit 401kGrade if you sign up or buy something. Those cookies are set by those companies under their own privacy policies, not ours. We receive reports about referrals and commissions, which generally don't identify you by name. You can block or delete cookies in your browser settings. As of the date above, no affiliate links are live.
Email you send us
If you email us, we receive your email address and whatever you include in the message, and we use it only to reply and to fix issues you report. Email is delivered through Cloudflare Email Routing and our email provider.
How information is shared
We don't sell or rent personal information, and we don't share it for cross-context behavioral advertising. Information is shared only with the service providers described above (Cloudflare and Beehiiv) to run the site and newsletter, with affiliate partners as described above, or when required by law.
Plan data on this site
Plan pages show information from public Form 5500 filings with the U.S. Department of Labor. They describe employers' retirement plans, not individual participants, and contain no participant-level personal information.
Your choices and rights
- Unsubscribe from the newsletter using the link in any email.
- Ask us to access, correct, or delete the information we hold about you (in practice, your newsletter subscription or emails you've sent) by contacting us. Depending on where you live, you may have additional rights under state privacy laws. We'll honor reasonable requests from anyone.
- Block or delete cookies in your browser. The site works without cookies, though the newsletter form may not.
Children
401kGrade is intended for adults and isn't directed to children under 13. We don't knowingly collect personal information from children.
Changes
If this policy changes, we'll update the effective date above and, for significant changes, mention it in the newsletter.
Contact
Questions about privacy? See our contact page.