Privacy

A site about other companies' privacy terms has to keep its own short. These are all of them.

Cookies

No cookies are set on public pages.

What your browser keeps

Your browser keeps up to three items in its own storage (localStorage): theme, your light or dark choice; tuck.sender, the name and address you type on the letter page; and, if you buy the follow-through kit, tuck.pass, your pass. They stay on your device. The site never reads the first two on its server; the pass is sent only when you open the kit, as part of the kit's address. You can clear them by clearing this site's data in your browser.

Server logs

Like any web server, ours logs each request: the IP address, the address requested, including any query (except on the follow-through kit's pages, which are logged by path only), and the browser's user-agent string. The logs are used to keep the site running and are deleted after 30 days.

Analytics

Planned analytics (not yet running) will be first-party and cookieless: they will run on our server, not a third party's, and will set nothing in your browser. They will count page views by kind of page and route (never the query string), the referring site's host name, the country if our proxy supplies it, and the device class. Searches will be counted by the length of the term and the number of results, never the term itself; company page views, letters generated (the letter type and company) and visits to each section will be counted too. Visitors will be told apart for one day only, by a one-way hash of the day, the IP address, the user agent and a server secret, which cannot be reversed and changes every day. Raw records will be combined into daily totals each night and deleted after 30 days.

Fonts

The only third-party request is for fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which receives your IP address and browser details when it serves them.

Letters

Letters never leave your browser with your details in them. The letter page asks the server only for the company and the kind of letter; your name and address are written into the letter in your browser, and printing or emailing it happens on your device. No letter draft is stored, so there is nothing for us to delete.

The calendar file

The calendar file for an opt-out deadline is built from the company id and the date you type, sent back to you, and not stored. Like any request, it appears in the server log for 30 days.

The follow-through kit

The kit is the site's one paid extra. Payment happens on Stripe's own hosted page, reached by a plain form post from the kit page. This site sets no cookie for it and never sees your card details; Stripe's own privacy terms cover what you give Stripe.

For each payment the site keeps one row: the Stripe session id, the amount, the currency, the status (paid, refunded or a free pass we gave out) and how many times the kit and its calendar file were opened, with the last date. Nothing about you: no name, no email, no card, no address. The letters in the kit are built the same way as on the letter page: your name and address are filled in by your browser.

The pass is a signed token carried in the kit's link and in this browser's storage (tuck.pass). It is not a cookie, and the kit's pages tell your browser not to pass their address on to other sites. Server logs record those pages by their path only, never the pass or the rest of the address. A refund turns the pass off; ask and we refund.

Questions

Write to corrections@termsunconditional.com.