Privacy

If you make an account

Your email address, a name if you give one, and a hashed password. The hash cannot be reversed into your password. That is the whole record.

Your session is a random token in a cookie; the database holds only its hash. Logging out deletes it. Sessions expire after thirty days.

If you use the Opportunity Finder

We keep your answers and the recommendations they produced, so we can see which combinations come up and whether the model gives sensible spread. Without an account this is stored with no identifier at all — no name, no email, no IP address, no cookie. It cannot be traced back to you, including by us.

If you click a tool link

Tool links run through a redirect so we can keep them working and count clicks. We record which link, which page you came from, any campaign tag, and a hash of your IP address combined with the date. The hash changes daily and cannot be reversed to an address — it lets us estimate unique clicks and nothing more. We do not store raw IP addresses anywhere.

Analytics

First-party only. Page path, referrer, campaign, and which item was viewed. No third-party trackers, no advertising pixels, no cross-site identifiers, and no cookie banner — because there is nothing to consent to.

Email

We only email you if you asked us to, and we record when and where you agreed, because we have to be able to show it. Unsubscribing is one click and takes effect immediately.

Your rights

Under the GDPR you can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Deleting an account removes the account and its sessions and anonymises what remains. Ask via the contact page.