Privacy

What Small Local keeps, and what it does not.

Your book

A book holds what you type into it: dates, amounts, the kind of place, the category, the optional place name, the book's name and your goal. It is stored on WeldonPC's server and is shown only to someone who opens its private link. We store the link only as a one-way hash, so we cannot look a book up for you or recover a lost link. The full link does appear in the web server's access logs, which the host keeps for a limited time for security and troubleshooting.

No account, no email, no tracking

There is no sign-up and we never ask for your name or email. There are no analytics scripts, advertising tags, social widgets or third-party fonts: every file on the site comes from smalllocal.org itself.

Cookies

One cookie is set only on pages with a form, to protect the form from being sent by another website (a "CSRF" token). It holds no personal data.

Rate limits

To stop abuse we count requests per network address per hour. The address is stored only as a salted hash and the counts are deleted after three days.

Deleting

You can delete a book and every entry in it from the bottom of the book's page. A book nobody has opened for 400 days is deleted automatically. Nightly database backups are kept for 14 days and then removed.

Payments

Payments are not switched on. When they are, PayPal will handle them and we will never see or store card details; this page will be updated first.