Your plan stays with you.

The public planner needs no account. Plans and inventory stay in your browser; advertising remains disabled.

On your device

Your plan is stored in this browser's local storage: targets, quantities, inventory, checklist progress, nicknames and assignments. Start a new plan or clear this site's storage to remove it. Devices and browser profiles have separate storage.

When you share

The plan snapshot is encoded in the link's fragment after #. It is not encrypted: anyone with the link can read it. Fragments are not part of a normal HTTP request. Our visit counter does not send the fragment, plan, inventory, nicknames or target-query parameters.

Minimal first-party visit analytics

We count visible page loads and approximate browser-tab sessions to understand which tools people use. We record the page path, receipt time, estimated network-exit country, external referring domain and valid utm_source/utm_medium labels. We do not store raw IP addresses, full browser user-agent strings, full referrer URLs, query strings or fragments in this analytics database. We do not use an advertising identifier or analytics cookie.

A random session identifier is held in this tab's session storage for a rolling 30-minute visit. The server keeps only its SHA-256 digest. A new tab, expired session, blocked storage, browser privacy feature or ad blocker may change the counts; sessions are not exact people. Country is a network-exit estimate: available edge metadata takes priority, otherwise the browser reads only the country code from this site's Cloudflare network-information endpoint. This estimate may be affected by VPNs, proxies or client reporting. Missing locations and missing referrers stay unknown.

Reports cover the last 90 calendar days. Older pageview records are removed in bounded batches when new visits are collected or the administrator requests statistics; there is no scheduled purge. Only the authorized site administrator can view aggregate statistics. No historical visits are invented before collection starts.

Your analytics choice

Do Not Track and Global Privacy Control signals disable our collector. You can also exclude this browser below; this preference is stored locally and does not affect the planner.

Enable JavaScript to manage the local preference, or use your browser's privacy controls.

Hosting and administrator access

The hosting provider processes ordinary requests, which can include IP addresses and browser information. This notice describes the application's own analytics storage, not every hosting security log. The private administrator area uses email and password sign-in with a secure session cookie. This login cookie is separate from analytics; public tools do not require sign-in.

Files and printouts

Exports and printouts are generated locally. Imported JSON is read locally. You choose who receives a copy.

Advertising

Advertising is disabled. This notice and the relevant consent controls will need updating before advertising scripts are introduced.