Draft, not yet reviewed

Privacy notice

In short

  • There are no accounts. You do not sign in.
  • Nothing you type is sent to any server.
  • Your record is kept on your own device, in your browser's storage.
  • The owner of this site cannot read your record, recover it or delete it.
  • There is no advertising, no tracking and no sale or sharing of data.

Where your record is kept

What you type is saved in your browser's own storage on the device you are using. The technical name for this storage is IndexedDB.

The record stays there. It is not copied to this site or to anyone else.

Because nothing is held on a server, nobody at this site can send you a copy of your record or bring back one that has been lost.

Who can read the record on your device

The copy on your device is not encrypted. Anyone who can unlock the device and open the browser can read it.

For that reason it is best to use your own device, not a shared or public computer.

Two other things are kept on your device. So that the tool opens with no connection, the browser keeps a copy of the site's own pages and files; that copy holds nothing you typed. While a tab is open, the browser also remembers when your visit began, whether the backup offer was shown and which part you were reviewing; it holds none of your words and is cleared when the tab is closed.

A browser can clear stored data

A browser can remove what a site has stored. This can happen when the device runs short of space, when browsing data is cleared, or after a period without a visit. Browsers differ.

At the time of writing, 12 October 2026, this is how the main browsers behave. Chrome and Edge keep stored data unless the device runs short of space. Firefox asks you whether to keep it. Safari may delete a site's stored data after seven days of using Safari without a visit to the site. Browsers change, so this may no longer be exact when you read it.

A print or a backup file is a copy that does not depend on this browser.

Printing and saving a file

Print and "Save as PDF" use your browser's own print dialog. The page is prepared on your device.

A saved PDF is not encrypted. The readable export is not encrypted either. Anyone who has the file can read it.

A file you save is yours to keep, move or delete. This site never receives it.

The encrypted backup

If you wish, you can save an encrypted backup. It is made on your device, with the encryption built into your browser.

For readers who want the detail: the backup is encrypted with AES-GCM and a 256-bit key. The key is made from your passphrase with PBKDF2, using HMAC-SHA-256, 600,000 rounds and a random salt.

Your passphrase is never stored and never sent.

If you lose this passphrase, this backup cannot be opened by anyone, including us. There is no recovery.

The check for secrets

As you type, the tool looks for things that resemble a card number, a Social Security number, or a password or PIN. If it finds one, it shows a warning. It never blocks you, and you can keep what you typed.

This check runs on your device only. What you typed is not sent anywhere and is not logged.

This check looks for common patterns. It cannot catch everything.

What the host of this site receives

This site is a set of fixed files served by Cloudflare. To deliver a page, a web host has to process some technical details of the request, such as the IP address of the device and the page asked for. That is true of every website.

Those details do not include anything you type into your record.

What is counted

The host can count requests for pages in total, without cookies: which public pages are asked for, from which country, and from which referring site. These are totals. They do not follow one person. No counting script is placed in any page.

At present the tool sends no other counts.

What this site never does

  • No advertising.
  • No trackers, and no advertising or social media pixels.
  • No cookies for tracking.
  • No recording of your session.
  • No selling or sharing of data.
  • No form that posts anything to this site.

Email you choose to send

The tool does not ask for your email address. The contact page gives an address and has no form.

If you choose to write, your message is received by the owner of this site, used only to reply to you, and deleted once it has been handled.

Please do not put passwords, account numbers or other private details in an email.

Seeing, saving and erasing what is stored

The "Stored on this device" screen lists what is stored, part by part. From there you can save a readable copy, save an encrypted backup, or erase everything.

Erasing is done by you, on your device. Nobody else can do it for you, because nobody else holds the record.

Who this tool is for

The tool is for adults recording their own affairs. It is written in United States English and is aimed at people in the United States.

This is for recording your own affairs, at your own pace. Nobody should fill it in for you, or press you to, without your agreement.

Your rights under privacy law

Because your record is held only on your device, this site has no copy to show you, correct or delete.

The owner's adviser will complete this section before launch.

Changes to this notice

If this notice changes, the change is listed with its date on the changes page.

Questions about this notice can be sent to contact@family-affairs-organizer.example.