Draft. This policy is a draft awaiting the owner's approval.

Privacy (draft)

• What we keep: your email address, a hash of your password and of your recovery code, and the boats, tasks and log entries you enter. When paid plans open: the plan, its status and PayPal's reference for it (never card numbers).
• What we do not do: no tracking cookies, no analytics services, no selling or sharing of your data, no email sent to you. The only outside service any page loads is the banner ad from adengine.us on the public reading pages, described under Advertising; it also counts one page view per page as a daily total.
• Cookies: one session cookie and one security (CSRF) cookie, both needed for signing in.
• Server logs: the web server keeps standard access logs (IP address, page, time) for security.
• Deleting: Account, Delete my account removes your account, boats, tasks and entries at once. Copies inside server backups disappear as those backups are replaced.
• Calendar feed: the feed address is private; anyone with it can read your due dates. Keep it to yourself.

Advertising

The home page, the trouble guides, the checklists, When to call a pro, Sources, Pricing and About show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services. Your logbook, boats, problem log, technician briefs, prints, calendar feed, account and sign-in pages, this page and the terms show no ad, and nothing you enter is sent to adengine.us.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site with those requests.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
• Nothing about you is sold or shared.