Security

GILTS calculates prices, yields and tax estimates in your browser. What you enter stays there.

A static site with a read-only edge API

GILTS serves page files from Cloudflare Pages and uses a small read-only Pages Function for the latest gilt snapshot. The function reads public market data from Turso Cloud and caches it at the edge. Your browser works out every figure on your device, and the API has no user session to protect.

Your inputs stay on your device

Your investment size, tax band, other savings income, favourites and column layout are read only by your browser. GILTS sends none of them to a server, and it keeps no database of users. The figures update on your device as you type.

Encrypted transport

The site and its data API load over HTTPS, so page files and prices travel encrypted. The pipeline collects reference data from the UK Debt Management Office (DMO) and market prices from dividenddata.co.uk over HTTPS before it publishes the snapshot to Turso Cloud.

No accounts and no user database

GILTS has no sign-in, no user profile and no query history on a server. Your settings live in local browser storage, so clearing site data removes them. There is no server copy to restore.

A read-only API has a small attack surface, not no attack surface. Keep your browser up to date, and check a price with your broker before you trade.