Privacy: what is stored, and for how long

The checking tools

The CSV validator, the JSON validator, the schema diff and the demo on the home page run in your browser. What you paste or open is not sent to the server. Your contracts are saved in your browser’s local storage so that you find them next time; clearing the site data removes them.

Gates

A gate exists on the server. For each gate we store its name, its contract and its versions, and a journal of the messages sent to its address.

• The journal keeps the last 100 messages, for 7 days, and the first 8,000 characters of each message.
• A gate that receives no message and is not edited for 30 days is deleted with its journal.
• The owner can empty the journal or delete the gate at any time from its dashboard.
• The dashboard is opened by a private link. Only a hash of its key is stored, so a lost link cannot be recovered.
• The public contract page shows the name and the fields of the contract. It never shows messages.

A gate is a testing tool. Do not send card numbers, health data, passwords or other secrets to it.

What is counted

To know whether the site is useful, it counts events: a visit, a check that ran and whether it passed, a gate created, a message received. A random identifier in a first-party cookie links these counts for 90 days. The content of what you check is never part of them. There is no advertising and no third-party tracker.

Abuse

The number of gates per address and of messages per gate is limited. A badge on each page lets anyone report a misuse to the hosting platform.