What is stored
- Your Visit Folder, if you make one: a fingerprint (SHA-256) of your private link, the dates the folder was made and last opened, and one sealed record per visit. Each record is encrypted (AES-256-GCM) with a key derived from your link, which we do not keep. Without the link, the database and its backups show only scrambled data.
- Rate limits: a salted hash of your connection’s address and a counter, kept for two days, so one connection cannot flood the site.
- Server logs: the hosting server keeps standard access logs (address, page, time) for a short time for security. Your own questions are sent with a form (POST), so they are not in page addresses or these logs.
Cookies
- Folder cookie (
__Host-cf_folder): holds your folder key so this browser opens your folder. Set only when you make or open a folder; removed when you leave or delete it. - Form security cookie (
__Host-cf_csrf): set only on pages with a form that saves something, to stop other sites posting forms in your name.
No analytics, no advertising, no tracking pixels, no third-party scripts or fonts. The claim checker and the question sheet store nothing.
Deleting
Delete a visit or the whole folder from the folder page; it is gone from the database at once. Database backups (nightly, kept 14 days, and one before and after each software update, the last ten kept) still hold it, sealed with your link, until they are rotated out.
Sharing
We do not sell or share anything. When payments start, PayPal will handle payment details; we will receive only what PayPal sends about the subscription.