Privacy
A site about what you agree to should be plain about what it collects. In this build: nothing, and nothing leaves your browser.
What this build collects
No analytics, no advertising, no tracking cookies, no third-party scripts. Searching does not create a profile of you. Pages are served as static files; the hosting provider keeps its own routine server logs, which we do not have a pipeline reading. There are no accounts on this deployment, so there is nowhere for anything to be stored.
What stays in your browser
Two things are kept in this browser’s local storage, and nowhere else. They are readable only by this site, on this device, and are never transmitted:
- Your watchlist — the agreements and companies you chose to watch, and the date you added each.
- Submission drafts — anything you entered in the submit form, kept so you can see what a submission captures.
Clearing your browser’s site data removes both. Your watchlist page can clear the first, and the submit page can clear the second.
Personal information in documents
The index holds blank agreements — the version a business publishes, before anyone fills it in. Signed copies carry names, signatures, membership numbers, and sometimes medical details about a child, and none of that belongs in a public index. The submission flow asks you to confirm a document is unsigned, and anything identifying a person is removed before a record is published. If you find personal information in a record, report it and it comes down while it is checked.
When there are accounts
Sign-in exists in this codebase but is not switched on for this deployment — there is no account database attached, so nothing can be stored even if you tried. Where it is switched on, an account holds an email address, a name, a password hash, a watchlist, and four optional answers from setup; it sends one kind of email, and the account page deletes all of it.