Privacy, explained
Your planner never leaves your device.
This page says what that means in practice. The formal policy is on the privacy page; this is the plain version.
What stays on your device
- Everything you enter: the name, the line about what the planner is for, the things you avoid, every choice of style, colour, weeks and rows. The maker runs in your browser; nothing is posted to a server while you work.
- The preview and the PDF. Both are built in your browser from your choices. The fonts for the PDF are two static files loaded from this site, like an image.
- The plan file you save. It is a plain file on your computer or phone. We never see it.
- The “remember on this device” copy, if you switch it on. It lives in your browser’s storage until you erase it.
- Whatever you later type into the PDF. That happens in your PDF reader, not on this site.
What leaves your device
- The payment. Stripe receives your email address, billing country and payment details, as it would in any online shop. It does not receive your planner. Your email is used to send you the unlock link or the download link.
- The unlock check. When you open an unlock link, your browser sends the unlock code (a signed reference to your purchase) to our server, which answers “valid” or “not valid”. Nothing else is in that request.
- A visit count. A small script counts page views on all our sites: the page path, the time and a non-reversible daily identifier. It sets no cookie, builds no profile and never sees form contents.
- Ordinary hosting logs. Our host keeps short-lived server logs (IP address, time, page) for security.
How we check this
Before each release an automated test fills the maker with unique made-up entries, previews, exports the PDF and opens an unlock link, while recording every network request the page makes. The test fails if any of those entries appears in any request. It also fails if the maker code contains any network call other than the unlock check and the font files.
What you can do
- Use a private device, not a shared or public computer, and leave “remember on this device” off on anything shared.
- On the last step of the maker, “Erase everything stored on this device” removes the settings, the remember setting and the unlock from that browser. Files you already downloaded are yours and stay where you put them.
What we cannot do
Recover a plan file you lost, read your planner, or reset a password: there is none. Support can only help with the site, the payment and the download or unlock link, and will never ask you to send your planner.
Formal details: privacy policy · legal notice.
Why is the plan file not encrypted?
Because it holds nothing secret (a name, a few rules and layout choices), and an encrypted file needs a password that can be lost. We chose no password on purpose.
Does the unlock link contain my planner?
No. It contains a signed reference to your purchase and an expiry date, nothing else. Anyone with the link could unlock the export on their device, so keep the email as you would a receipt.
Does the typeable PDF send anything anywhere?
No. It is a normal PDF with form fields. What you type stays in the file on your device, in whatever reader you use.