Privacy

Your email address, if you sign in. Sign-in is by emailed link, so there is no password to store. The address is held by our authentication provider (Supabase) and is used to identify your account and to send the sign-in link.

Anything you save. If you save a property, the name, jurisdiction, programs and notes you enter are stored against your account. Nothing is saved unless you enter it.

Coverage requests. If you tell us something is missing, we store what you wrote and, if you supplied one, a reply-to email address. That address is used to answer you and for nothing else.

A unit you check on the audit, checklist or limits pages is not stored. Those pages carry their inputs in the URL and evaluate against the corpus; nothing is written to your account and no record of the unit is kept.

There is no analytics, no tag manager, no session recorder and no advertising script on this site. Nothing tracks you across other sites, because there is nothing here to track you with.

The only cookies set are the session cookies that keep you signed in. There is no cookie banner because there is nothing to consent to.

The gap-report form is rate-limited using your IP address, which is held in memory only for long enough to count requests in the last hour. It is never written to the database and never associated with what you submitted.

Supabase hosts the database and handles authentication. Netlify serves the site. Both are processors: they hold the data to run the service and do not use it for anything else. Email delivery for sign-in links goes through whichever provider Supabase is configured with.

Nothing is sold, and nothing is shared with anyone for marketing. If we are ever legally compelled to disclose something, we will say so unless the law forbids it.

Ask, and your account and everything saved against it is deleted. Use the request form or reply to any email from us. There is no retention period we are trying to hold you to; deletion is not conditional on anything.

The corpus itself — the rules, sources and limits — contains no personal data. It is compiled from published government documents.

If what the product stores changes, this page changes in the same release. If a change means storing something new about you, we will say so before it starts rather than after.