What Pourshare keeps, and what it does not.

The Split Sheet

Nothing you type into the Split Sheet is stored. The figures go to the server, the split comes back, and nothing is written to the database.

Pool Books

A Pool Book holds what you put in it: a book name, roles, the roster names and each saved night’s figures and split. All of that is encrypted (AES-256-GCM) with a key made from the book’s link and a server key. The database keeps only a fingerprint (SHA-256) of the link, plus each night’s date and shift label, so the site can find a book and sort its nights. We cannot recover a lost link.

The link’s code is never part of a page address the server receives. A book link looks like garfieldhts.biz/b#…, and browsers never send the part after the #. The page that link opens hands the code to the site once, inside a form, and the site then keeps the book open in your browser with a private cookie for 30 days (“Close the book on this device” removes it). So the code is not in the web server’s access log, its visitor statistics or the site’s error log, and without the link a book cannot be read from the database, from its backups or from the logs.

Use first names or initials. Do not put Social Security numbers, bank details or anything else sensitive in a book. Delete a night or the whole book at any time from the book itself. Books not opened for 400 days are deleted automatically.

Logs, cookies and backups

The web server keeps a standard access log (address, time, page, browser) for security and troubleshooting. To limit abuse, the site keeps daily counters keyed by a salted hash of your address; they are deleted within three days. Forms set a security-token cookie that stops other sites from posting into yours, and opening a Pool Book sets the book cookie described above; there are no tracking or advertising cookies and no outside scripts.

This site’s own nightly database copies are kept for 14 days. WeldonPC.com also backs up the whole server and keeps copies offline, on its own schedule. Every one of these copies holds book data only in its encrypted form, and none holds a book’s link.

No email is collected, nothing is sold, and no one else receives your data. Questions: weldonpc.com/contact.