- No accounts. We ask for no name, email, phone or address. A plan holds a name you may give it, room sizes and fixtures.
- Private links. We store only a one-way hash of each plan's link key, so the database alone cannot be used to open a plan.
- Limits. To stop abuse we count new plans and changes per connection and per network in a table keyed by a salted hash of the address (or of its network), plus one site-wide count of new plans a day. The counts are not used for anything else and are deleted after 3 days.
- Cookies. Forms set one security cookie (to stop forged form posts). No tracking, advertising or analytics cookies. Fonts are served from this site; the only outside service the pages load is the adengine.us banner described under Advertising, and plan pages load none.
- Server logs. Like any web server, ours keeps standard access logs (address, time, page) for security and troubleshooting.
- Quick check. The site does not save the values typed into the quick zone check. They travel in the page address, so, like every address, they appear in the web server's access logs.
- Deletion. Delete a plan from its page at any time; plans not opened for 18 months are deleted automatically. Copies can remain in database backups for a while after. On the server, nightly backups are kept for 14 days and the backups taken before and after each site update are kept for the last 10 updates. A copy of each update's backups is also kept on WeldonPC's own office storage, with no set expiry. Backups are never shared and are used only to restore the site.
- Payments. When payments are switched on they go through PayPal; we would keep only the subscription reference, plan and status, never card details.
Advertising
The home page, the planner's start page, the quick check, the guide and the pricing, sources and about pages each show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services. Plan pages and printable plan sheets, this page, the terms and error pages show no ad.
To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site with those requests. It never receives the address of the page you are on, so the values typed into the quick check do not reach it.
- No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
- How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
- What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
- Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
- Nothing about you is sold or shared.