Privacy

Every tool runs in your browser. The questions, the checks and the sheet you end up with are all worked out on your device. No tool sends what you type into it anywhere, and the site has no way to receive it.

The search box and the filters on the tool library work the same way. What you type there stays there.

A tool only remembers your answers if you press the button that says so. It then stores them in this browser, on this device, under a name that identifies the tool. Another browser, another device or another person's account will not see them.

Every tool has a Clear button. It removes what that tool saved and the sheet it had built, immediately and completely, and clearing your browser's site data does the same thing. What it cannot reach is a copy that has already left: a printed page, something pasted into a message, a screenshot. That is true of anything on any site, and it is worth saying plainly rather than implying a button undoes it.

No name, no full date of birth, no address, no school, no photograph, no voice recording, no medical record, no account identifier, and no account of an incident. These are not fields we chose to leave optional. They do not exist in the code.

A required question about your child or your family offers "I would rather not say". Questions about the plan itself, such as which tasks it covers, need an answer so the sheet can be built.

The site sets no cookies. There is no advertising, no affiliate link, no newsletter sign-up and no social widget. The network that delivers the pages is described under hosting.

The site does count its own visits, with open-source software running on its own server: nothing is sent to Google Analytics or to any other company. Each page view records the page, the site you arrived from, your browser, operating system, device type, screen size, language, and an approximate location worked out from your IP address. The IP address itself is never stored, and neither is your full browser identifier. The counter writes nothing to your browser, never sees what you type into a tool or which answers you choose, and records no clicks and no screen. If your browser sends a Do Not Track signal, nothing is counted, and any content blocker stops the counter without breaking the site.

No typeface comes from a font network: the ones this site uses are served from the site itself, and a page in a script they do not cover uses the fonts already on your device. So no font network learns that you opened a page.

It is the one thing on this site that sends what you enter, and only when you press its button. When you send this form, the relay forwards your comment if you wrote one, your two yes-or-no answers if you gave them, the chapter number if supplied, and the page language to a private Discord channel I read. It does not forward your IP address, browser headers or referrer to that channel.

The relay code does not write your feedback to disk or log its content. Your feedback stays in Discord until I delete it.

This form does not ask for contact details, so I cannot reply to you, and it shows you no message identifier to request deletion afterwards. A comment can identify you, a child or another person even without contact details, so leave out names and anything else that would let someone be recognized, as well as health or other sensitive information. This form does not provide personal advice or emergency help.

For rate limiting, the relay hashes the connection IP with a salt changed on restart and keeps a counter in memory for a fifteen-minute window. This description does not establish what Discord, the CDN or the hosting provider records or retains.

Printing uses your browser's own print dialog. Copying uses your clipboard. Neither one sends anything anywhere: what leaves this page leaves through your printer or your clipboard, and nowhere else.

None of these go through a third-party service.

Pages are delivered through Cloudflare, a content delivery network that sits in front of the web server. Cloudflare and the web server receive technical connection details when a page is requested, such as your IP address and browser information. Cloudflare handles those details to deliver and protect the site, under its own privacy policy, and your browser may be asked to send network error reports to it. The site owner gets only totals from Cloudflare, such as how many requests arrived, and no record of any single visitor. Apart from the page counter described above, neither the web server nor the shared server in front of it, which routes each request to this site, keeps a log of the pages you visit. The only logs they keep are technical notes about the servers themselves: old ones are replaced as new ones are written, and only a few small files are kept. Nothing you type into a tool is part of that traffic. What you send with the private feedback form is a separate matter: it goes to a private Discord channel, as the section on private feedback above explains.

There is no contact email address. The private feedback on the feedback page reaches me. It asks for no name and no contact details, so it cannot be answered.