What Hornsheet keeps

No accounts, no email, no tracking cookies. There are no analytics services and no outside fonts. The public pages show one banner ad from adengine.us, described under Advertising below; it is the only outside service any page loads, and it also counts one page view per page as a daily total.

A series holds what the race committee types: series name, settings, sail numbers, boat names, optional skipper names, ratings, race dates, times and letter scores. We store a one-way hash (SHA-256) of the committee code, never the code itself. The code is part of the committee link, though, so the link also sits in your browser history and in this site's web server access log, which only the host can read. Anyone holding the link can change the series: share it only with the race committee, and delete the series if the link gets out. Series nobody opens for 400 days are deleted automatically; the committee can delete a series at any time and it is gone from the server at once (nightly database backups roll off within 14 days).

Public sheets show only what the committee publishes. Skipper names stay off the public sheet unless the committee chooses to show them. Public sheets are marked so search engines do not index them.

Cookies. Pages with a form set one security cookie (to stop forged form posts). Nothing else.

Abuse limits. To slow down misuse we count requests per day using a salted one-way hash of the visitor's network address; counts are deleted after two days. Web server logs are kept by the host for operations and security.

Payments. None yet (preview). When checkout opens, PayPal will process payments; Hornsheet will keep only a hash of your Pass key and the PayPal reference, never card details.

Advertising

The public pages of Hornsheet (home, the corrected-time calculator before you work out a race, pricing and how scoring works) show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services. Committee desks, public results sheets, print sheets, calculator results, the start-a-series page, this page and the terms show none.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your network address, your browser type and the address of this site with those requests.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your network address is used. adengine.us looks up the approximate city for your address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (network address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
• Nothing about you is sold or shared.

Questions: Hornsheet is run by WeldonPC.com.