- No accounts, no email, no analytics services, no tracking cookies, no third-party fonts. The only outside service the pages load is the adengine.us banner described under Advertising; it also counts one page view per page as a daily total.
- Cookies. The front page, the record, the violation lists, search and the information pages set no cookie. Pages that carry a form (facility pages, place pages and the watch-list pages) set one security cookie,
__Host-cs_csrf: a random token against cross-site forgery that says nothing about you and expires after 24 hours. When you make a watch list, press “Watch this”, or choose “Use this list in this browser” on a list’s page, this browser keeps that list’s link in a first-party cookie,__Host-cs_watch, for up to 400 days, so “Watch this” buttons add to the same list. Just opening a list’s link never sets it. “Make this browser forget the list” removes it. - Watch lists. We store the list’s name, its items (facility numbers, places, ZIP codes) and when it was made, last used and last seen. Its link key is stored only as a SHA-256 hash: we can check a link you open against it, but we cannot work out a list’s link from what we store, so we cannot show you a lost one. Lists that nobody uses for 400 days (by their page, feed or CSV) are deleted with their items; you can delete yours at any time.
- Abuse limits. To limit how many lists one address can make, we count requests per day against a salted hash of your IP address; counters are deleted after two days.
- Server logs. The host’s web server keeps standard access logs (IP address, time, page address, browser) for its normal retention. Full watch-list and feed addresses appear in those logs.
- Backups. The database is copied nightly (14 copies kept) and at each software update (copies taken at each software update are kept for up to 30 days). The copies this site’s update routine keeps off the server hold only the public record, never watch lists or the abuse counters. Whole-server backups that WeldonPC (which runs the server) makes for disaster recovery can include this site’s database.
- Payments. None are taken yet. When they are, PayPal will handle them; this site will keep only the pass status and PayPal’s reference, never card details.
Advertising
The front page, the record, the violation lists, the place and facility pages, How it’s kept, Pricing and About show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC’s own services. The watch-list pages, search, this page, the terms and error pages show none. An ad never adds, changes or removes an entry in the record.
To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address and your browser type with those requests. The requests name this site; they never carry the address of the page you are on, so adengine.us does not learn which facility, place or list you are looking at.
- No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
- How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC’s own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
- What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, browser) for security; it is deleted on a rolling schedule.
- Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser’s site, which has its own privacy policy.
- Nothing about you is sold or shared.
Questions
Questions about this page or what the site keeps: Contact WeldonPC (weldonpc.com/contact), the company that runs the site.