What is kept, and where

• No account. No name, email, phone or password is asked for. A daybook is a private link: whoever holds it can open and write in it.
• Encrypted at rest. Each daybook is stored with AES-256-GCM under a key made from its link and a secret kept on our server. The database holds only a one-way hash of the link, so the database cannot be searched for a lost link, and this site has no way to recover one.
• Web server logs and statistics. Like most web servers, ours writes every request to an access log: the time, your IP address, the full address of the page (for a daybook page, that includes its private link) and what your browser reports about itself. The raw logs are kept in the hosting account for up to about two months. The hosting control panel’s standard statistics, AWStats and Webalizer, are built from those logs; they list the most-visited page addresses, which can include private links, and they stay on the server. So WeldonPC could find a link there. The site’s own error log removes private links before it writes anything. Do not share a screenshot of the address bar.
• No cookies except one short security cookie set when a page has a form, to stop forged form posts.
• Rate limits count requests per address. In the site’s own database the address is stored only as a salted hash, and the counts are deleted after two days; the access log above keeps the address itself.
• Deletion. “Delete this daybook” removes it from the live database at once, and its link stops working. A daybook not opened for 1,100 days (about three years) is deleted automatically; opening any of its pages counts.
• Backups. Copies of the database are kept as backups, and a deleted daybook stays in each copy, still encrypted, until that copy is deleted. The server’s nightly copies are kept for 14 days. The hosting server’s own account backups are kept about four weeks; they hold the whole hosting account, including its logs and the site’s secret key. Copies are also taken each time the site is updated: the server keeps those from the last ten updates, and WeldonPC keeps a copy of each on its office storage with no fixed end date. WeldonPC’s own occasional backups of its servers also have no fixed end date.
• No advertising, no tracking scripts, no selling of data. No outside scripts or fonts are loaded. The only statistics are the hosting server’s standard reports described above.

Please do not type full account numbers, Social Security numbers or passwords into a daybook.