What we hold
- Your name, as you set it, and your email address.
- Your member number, your House, and the Acts you record.
- Your timezone and the hour your day starts, so a night shift counts correctly.
- That you confirmed you are 18 or over, and when. Not your date of birth: it is checked and discarded in the same request.
What we do not hold
- Your date of birth.
- Your location, beyond the timezone your browser reports.
- Your full IP address. Rate limiting uses a salted hash of an address prefix.
Who else sees it
Nobody. There is no analytics service, no advertising network and no third-party font or script on this site. Ledger text is never sent anywhere outside our own database.
Deleting your account
Settings has a delete control. It erases your name, your sign-in details and the text of your entries. It keeps your member number and the fact that points were once earned, because deleting those would silently change your House’s history.
The terms say what the Ledger is and what the rules are.