Privacy, in plain language

What stays on your device

Everything you write: studies, field notes, assumptions, decisions, report drafts, your settings, and the counts of your practice. It lives in this browser’s storage on this device. There is no account, and no one else can see it.

Clearing this browser’s data for the site erases it. To keep a copy, download a backup from Settings.

What leaves it

Only a field report you choose to publish, and only exactly the preview you approved. Personal details can be masked before it leaves. It is stored privately with Vercel Blob in the United States. Anyone with the link can read it; it is not listed anywhere, and search engines are asked not to index it.

The key that removes a report stays on your device; the server keeps only a scrambled copy of it (a hash). Removing a report takes effect at once.

Flags and limits

A reader can flag a report. The server then stores a scrambled key made from the reader’s network address, so each reader counts once; the address itself is never stored. Three readers’ flags hide a report.

To stop floods, the server keeps network addresses briefly in memory to limit how often one address can publish or flag. They are not written down.

What it does not do

No cookies, no advertising, and no analytics or tracking scripts. Shared mission pages hold no personal data. Living Fieldbook runs on Vercel, which, like any web host, keeps standard request logs (such as network address and browser type) for a limited time to run and protect the service.

Starting over

Settings can erase everything on this device. Published reports stay online until you remove them, so remove them from their drafts first.