Privacy Policy
We collect no personal information: no accounts, no analytics, no uploaded parameters — everything is computed in your browser.
- Effective
- Not set
This page explains what Aqua Toolbox ("the site") reads and writes in your browser, what the server records, and what choices you have. The site is a pure utility: its business model does not depend on user data, which is why this policy can be short enough that every clause maps onto something you could verify in the source.
The operator identity and contact address are listed in the "to be filled" section below. Until those are supplied, this page is not a complete legal document.
1What we do not collect
- No accounts. There is no sign-up or sign-in, and we never ask for an email address, phone number or any other identifier.
- No analytics. No third-party analytics, advertising or A/B testing script is loaded, and the source contains no references to third-party domains.
- No uploaded parameters. The dimensions, glass thicknesses and profile selections you enter are never sent to a server. Every calculation runs locally in your browser.
- No profiling and no cross-site tracking. The site holds no identifier that could recognise you across visits or across sites.
2What happens to parameters in a share link
The "the link is the design" feature writes your design parameters into the address bar. That means a link you forward contains every parameter of your tank. That is the point of the feature, but be aware: the parameters leave your device with the link, and anyone who receives it can read those dimensions. Our server does not store them on account of that request.
If you would rather not have parameters in the address bar, use the export buttons (CSV / PNG) and then close or clear the page address instead of copying the share link.
3The only data we ever touch
There are exactly two places where the site comes into contact with data about you, and neither exists to identify you:
- A unit-preference cookie (`aqua_units`). It records only whether you chose metric, US customary or imperial. It lasts one year, is scoped to this site, and is set `SameSite=Lax`. It contains no identifier, it is not a tracking cookie, and it is not used for advertising. Clearing your browser data removes it; afterwards the site falls back to the default unit system for the current language.
- Server access logs. Like any website, the hosting server records request time, IP address, User-Agent and path for troubleshooting and abuse prevention. This is the only point at which an IP address reaches us. Logs are kept for [to be filled: log retention period].
In addition, the Latin webfonts are self-hosted (`/fonts/*.woff2`), so the page never calls a third-party font service — that kind of request would expose which page you are reading to a third party.
4What we never do
- We do not sell, rent or trade data;
- We do not share data with third parties for their own marketing;
- We do not restrict features because you declined to provide personal information — no feature here requires any.
5Where data is stored
The site is hosted by [to be filled: hosting provider and region]. The access logs described above may be stored on that provider's infrastructure in [to be filled: log storage region]. We maintain no user database of our own.
6Children
This is a tool site for people who keep aquariums. It is not designed for children and does not knowingly collect information from them. Since there are no accounts and no identity data, such data does not normally exist here at all.
7Your rights
Because the site keeps no records that identify you, there is normally nothing to access, export or erase. If you believe the server logs contain your personal information, or you have any question about this policy, contact [to be filled: contact email] (until that is configured, the footer does not display a contact address). We will respond within a reasonable period once we can verify the request.
8Changes to this policy
When this policy changes, the effective date at the top of the page changes with it. Substantive changes to data practices are stated prominently rather than edited in silently.
9Governing law
This policy is governed by and construed under the laws of [to be filled: governing jurisdiction].
Must be filled before launch
The following facts are known only to the deployer, so they are placeholders in this repository. The operator identity, contact address and governing law in a legal document have to be true — inventing them is worse than leaving them blank, which is why they are shown here instead of buried in a comment.
- To fillOperator name
- The legal entity named in this policy and in the footer
- To fillContact email
- Where data-related requests go (currently unset, so the footer hides that cell)
- To fillHosting provider and region
- Clause 5: where the site and access logs actually live
- To fillLog retention period
- Clause 3: how long server access logs are actually kept
- To fillEffective date
- The date shown at the top of this page
- To fillGoverning jurisdiction
- Clause 9: applicable law and venue