What is kept, and what is not.

Using the tools

The Rulebook, Work order and Ship check answer in the page. What you type is used to build the result and is not stored. Ship-check answers travel in the page address as short codes (for example a1=y), so they are recorded in the web server’s access log along with the address. No accounts, no email addresses, no names.

If you save to a Shelf

• The Shelf is found by a hash of its private link key; the key itself is never stored.
• Project names, rulebook answers and work orders are encrypted (AES-256-GCM) with a key derived from your link key, so the database alone cannot read them.
• Ship-check results are stored as answer codes and counts only.
• A Shelf not opened for 730 days is deleted (unless a Shelf Pass is running). You can delete it, or one project, at any time.

Cookies

Two cookies, both strictly necessary: a form-security cookie, set on pages that have a form, and, once you start or open a Shelf, a cookie holding its key so this browser can open it. No analytics, no advertising, no third-party scripts or fonts.

Server logs and limits

The web server keeps standard access logs (address, time, the full page address including any ship-check answer codes, the referring page and the browser name) for security and troubleshooting. Text typed into the Rulebook and Work order forms is sent in the request body, which is not logged. To limit abuse, the app counts requests per connection per hour using a salted hash of the address, and deletes those counts after two days.

Payments

There is no checkout during the preview. When it opens, payments go through PayPal, and this site will keep only the subscription reference, plan and dates that PayPal sends.