Privacy

The short version

What you track stays on your device. We don't collect it and we can't read it. If you turn on automatic backup, an encrypted copy is kept for you, and it's locked with a code only you have. There's no account and no cookies, and this website runs no analytics.

If you buy a year's keepsakes, Stripe takes your payment, and we keep a small licence record so your key works: no card details, and no copy of your email address.

What we never do

• We never sell or rent your information, or share it with data brokers.
• We never show adverts. There are no advertising networks, tracking pixels or cookies on this site.
• We never send what you track to an AI service, and never use it to train AI.
• We never make decisions about you by computer. Your totals, pace and runs are worked out on your device, for you.

Who's responsible

HitF5 Solutions Ltd, a company registered in England and Wales (company number 17531973), registered office 64 High View Road, Guildford, GU2 7RU, is the controller of the personal data described here. We're registered with the Information Commissioner's Office (ICO), registration number ZC281402. Contact: [email protected].

What stays on your device

The themes, things, counts, lists, notes and goals you enter are saved in your browser on your device (in its IndexedDB and localStorage). They're never sent to us, unless you turn on automatic backup (below), and then only encrypted. Some things people track, like sleep or drinks, can say something about their health: that's another reason they stay with you, and we never receive them.

Because they're only on your device, they can be lost if you clear your browser's data, change device or browser, or if your browser removes them (some browsers, Safari on iPhone in particular, may clear saved data from sites you haven't opened for a while). You can download a copy of everything whenever you like. That file stays wherever you keep it: we never receive it. Automatic backup protects you against most of this.

If you buy, your licence key, the result of the last check on it and a random device number are kept on your device too. Your browser also keeps copies of the site's pages so it opens faster and works offline.

If you turn on automatic backup

Automatic backup is free and it's off until you choose it. When you turn it on:

• Your device makes a recovery code (it looks like SC-XXXXX-XXXXX-XXXXX-XXXXX). Your device uses it to lock (encrypt) a copy of everything you've entered, then sends us that locked copy, at most once a day when something's changed.
• We can't read it. The code never leaves your device unless you ask us to email it to you (below), and we don't keep it. Without the code, the copy is unreadable to us and to anyone else. It also means we can't open your backup for you or reset the code: if you lose the code, the backup can't be restored.
• The copy is stored by Cloudflare in its EU jurisdiction. With it we keep only when it was last changed and a scrambled code (a hash) that lets your device replace or delete it. We don't keep your IP address, your name or your email address with it, and nothing links it to a purchase.
• Each copy can be up to 1 MB. Your IP address is used briefly to limit how often backups can be made, and a Cloudflare check (Turnstile) runs when your first copy is made, when an expired copy is recreated, and when you ask us to email your recovery code, to stop automated abuse.
• If you ask us to email you the code, we pass your email address and the code to Resend to send one email. We don't keep either. Resend keeps the email, which includes your code, for about 30 days. If you'd rather nobody else ever holds it, write the code down or save it instead.

Why we use it, and the legal basis: your explicit consent (UK GDPR Article 9(2)(a) and Article 6(1)(a)), given when you turn automatic backup on after reading what it does. You can withdraw it at any time by turning it off.

Deleting it: when you turn automatic backup off, you can tick a box to delete the online copy straight away. You can also delete it from the app's settings at any time. If you've lost access to the app, write to us with your recovery code and we'll delete it.

When you buy

What happens to your information, step by step:

• Stripe takes the payment on its own page. Stripe collects your name, email address, billing address and card details. We never see your card details. We receive from Stripe a payment reference, the email address you gave and your billing country.
• Our licence record (one for each year you buy) keeps: the Stripe payment references, which year it's for, a scrambled code (a hash) made from your licence key, a scrambled code (a keyed hash) made from your email address, whether the licence is active or refunded, the dates, and a random number for each device you unlock. We don't keep your key itself, and we don't keep your email address in our own database.
• Why a scrambled email: if you ask us to email your key again, we make the same scrambled code from the address you type and see whether it matches a purchase. We send the key only if it does, and we give the same answer on screen whether it matched or not, so nobody can use the form to find out who's bought.
• Resend delivers the email with your key. It receives your email address and the message.
• Your IP address is seen by Cloudflare when you use the site (see below). We use it only for short-lived limits on how often a request can be made, and we don't store it in our database.

Why we use it, and the legal basis (UK GDPR Article 6):

• To give you what you bought (contract): taking payment, making your key, emailing it to you, unlocking your devices and sending the key again when you ask.
• To stop abuse and fraud (our legitimate interests in keeping the service safe and fair): checking the billing country, the 5-device limit, limits on how often a request can be made, and matching refunds and payment disputes to a licence. These use as little as we can, and none of it is shared or used to profile you.
• To keep the sales records the law requires (legal obligation): tax and accounting records.

Who else handles your data

These companies process personal data for us. Each has its own privacy policy.

• Stripe: payments and refunds. It's also an independent controller of the payment details you give it.
• Resend: sending the email that contains your key. It sends from the EU but stores the email and its delivery record in the United States, for about 30 days, and, if you ask, the email with your recovery code.
• Cloudflare: hosts this site and runs our service: web hosting and delivery, the program that handles purchases and unlocking, and our licence database (in its EU jurisdiction) and, if you turn it on, the locked copy made by automatic backup (in its EU jurisdiction). Cloudflare sees the IP address and the technical details of each request, and keeps ordinary server logs. We don't use them to identify you.

Where your data goes. Our licence database is in Cloudflare's EU jurisdiction. UK law treats the EU and EEA as protecting personal data properly. Stripe, Resend and Cloudflare are United States companies or part of one, and may handle data there: Resend stores its emails there, and Cloudflare's network runs worldwide, so a request can pass through a data centre outside the UK. For transfers to the United States, each of them is certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US “data bridge”), and each one's data processing terms also include the EU standard contractual clauses with the UK Addendum. Their terms: Stripe, Cloudflare, Resend.

If the business changes hands. If we pass Small Counts to another business, for example by selling it, the licence records go with it so your licence keeps working. The new owner must use them only as this policy describes, and we'll say so on the site.

How long we keep things

• Licence record: while your licence is active, for as long as we run the service, because we need it to unlock your devices and send your key again. A device that hasn't been used for 60 days is removed from it.
• After a refund: we delete the scrambled email code and the device numbers straight away. We keep the rest (the payment references, the scrambled key code so a refunded key is recognised, the status and the dates) for 6 years, then delete it. A licence stopped because of a payment dispute is kept the same way, for 6 years from the dispute. Six years is how long a company must keep business records for tax, and how long someone can bring a claim about a contract in England, Wales and Northern Ireland (5 years in Scotland).
• Requests to email your key again: the scrambled email code and a count, for the day only.
• Payment records in Stripe: Stripe keeps these under its own privacy policy, including for the time tax and financial law requires.
• Email delivery records: Resend keeps the email and its delivery record for about 30 days.
• Automatic backup: until you delete it, or 12 months after it last changed, whichever comes first. If you stop using Small Counts, the copy is deleted automatically after that time.

Your rights

You can ask to see, correct or delete the personal data we hold about you, object to how we use it, ask us to restrict it, or ask for a copy in a form a computer can read (for what you track, the download in the app already gives you this). We can't find or read an automatic backup without its recovery code, so to delete one for you we need the code. We reply within one month. To find your licence record we need the email address you bought with: we make the scrambled code from it, as above, and look for a match. You can delete everything stored on your own device in the app's settings, or by clearing your browser's data for this site.

Please tell us first if you're unhappy with how we handle your data, so we can try to put it right. You can also complain to the Information Commissioner's Office (ico.org.uk).

Children

Small Counts is made for adults. We don't ask anyone's age, and we don't knowingly hold information about anyone under 18. If you think a child has bought from us, write to us: we'll refund it and delete the licence record, apart from what the law makes us keep for tax.

Cookies

Small Counts doesn't use cookies. We don't track you across visits or across websites.

Coming later

Sync between your devices, and counting visits to the site, aren't here yet. Before either one starts, we'll say on this page exactly what it does, what it keeps and where, and update the date at the top.

Changes to this policy

If we change this policy, the date at the top changes, and for a change that matters we put a notice on the site (we don't keep your email address, so we can't write to you). We won't start using information we already hold in a new way without telling you first, and asking you where the law requires it.

Contact

Questions about your information: [email protected].