What we keep, and what we do not

• No accounts, no email, no names. A Locker is identified by a random key in its link. Our database stores only a scrambled (SHA-256) copy of the key. The key is part of every Locker page's address, so it also appears in the web server's access logs (below): anyone holding your link can open your Locker, so keep it private.
• What a Locker holds: bag names, items, ticks and Size book lines you type, and the date it was last opened.
• Limits: to stop abuse we count requests per connection and per Locker for one hour, using scrambled keys; the counts are removed every night.
• Cookies: one security cookie that protects forms from forgery. No tracking, advertising or analytics cookies. The only script from another site is the small adengine.us ad on the public pages (see Advertising).
• Server logs: the web server keeps standard access logs (address, time, page address, which for a Locker page includes its key) for security and troubleshooting.
• Locker pages tell your browser not to send their address to other sites and not to keep a copy. They show no ad and load nothing from other sites.
• Deleting: the Delete button in a Locker removes everything in it at once. A Locker that holds nothing (no bags, sizes or pass) and has not been opened for 30 days is deleted automatically. Nightly backups roll off after 14 days.

Advertising

The public pages (home, kit lists, the Bag Packer, sizing and care, pricing, about and sources) show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services; they are never part of a kit list. Locker pages, the Locker start page, printable lists, and the privacy and terms pages show no ad.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site with those requests. The ad also counts one page view per page, kept only as a daily total for this site.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
• Nothing about you is sold or shared.