Privacy Policy

Sunlight - Daylight Tracker

No data collected Local storage only

Sunlight calculates sunrise and sunset times based on your location. Your coordinates are stored only on your device and are never transmitted anywhere.

Permissions used:

• Location (optional): To calculate times for your position. You can enter coordinates manually instead.
• Notifications (optional): To send daily daylight updates.
• Exact Alarm (optional): To schedule notifications at your chosen time.

Data collected: None. All preferences are stored locally on your device.

Card Stash - Loyalty Card Wallet

No data collected Local storage only

Card Stash stores your loyalty and membership card barcodes on your device. All data is encrypted at rest using AES-256, with the encryption key stored in your device's secure hardware (iOS Keychain or Android Keystore).

Card Stash makes zero network calls. No analytics, no crash reporting, no remote configuration, no data transmission of any kind. Your cards never leave your device unless you explicitly export them.

Permissions used:

• Camera (optional): To scan barcodes. Images are processed on-device and never stored or transmitted.
• Notifications (optional): To remind you before cards expire. All notifications are scheduled locally.
• Photo library (optional): To scan barcodes from saved images or to add a logo to a card. Selected images are processed on-device only.

Export and import: When you export your cards, the file is encrypted with a passphrase you choose (Argon2id key derivation, AES-256-GCM encryption). The passphrase is never stored on your device. The encrypted file is shared via your device's share sheet - Card Stash does not control or have access to where you send it.

Payment card protection: Card Stash automatically detects credit and debit card numbers using Luhn validation and BIN detection, and rejects them. Payment card numbers are never stored.

Data collected: None. All card data and preferences are stored locally on your device, encrypted at rest. No data is transmitted to any server.

Open source: Card Stash is open source under the MIT licence. You can inspect the full source code to verify these claims.

Trail Sparks - Family Scavenger Hunts

Minimal data Local storage only

Trail Sparks generates AI-adapted scavenger hunts for family walks. All hunt data, preferences, and history are stored locally on your device.

What is sent to the server: When generating a new hunt, the app sends the following to a Cloudflare Worker API proxy:

• Walk parameters: biome type, weather, walk duration, hunt mode
• Child ages (as bare integers, no names or identifiers)
• Optional free-text location description (e.g. "there's a stream and a ruined castle")
• Recent item history for exclusion and difficulty calibration (item names and outcomes only)

This data is used solely to construct a prompt for the AI model (Claude Haiku) and is not stored on the server. The Worker is stateless and discards all request data after responding.

What is NOT sent:

• No GPS location or coordinates
• No names, emails, or account information
• No device identifiers or advertising IDs
• No photos or camera data
• No analytics or usage tracking

Permissions used:

• Internet (required for generation only): To request a new hunt from the API. Once generated, hunts work fully offline.

Third-party processing: Hunt generation requests are forwarded to the Anthropic API (Claude Haiku) via a Cloudflare Worker. Anthropic's privacy policy and API data usage policy apply to this processing. Anthropic does not use API inputs to train models.

Data collected: No personal data is collected or stored on any server. All hunt history, preferences, and item library data is stored locally on your device and can be deleted by uninstalling the app.

benwhite.co and lab.benwhite.co

Minimal data

My personal website and experiments lab.

Cloudflare Web Analytics: I use Cloudflare Web Analytics for privacy-friendly, cookieless analytics. It collects aggregated page view and visitor data without using cookies or tracking individual users. This runs automatically on all pages and does not require consent.

Google Analytics: I also use Google Analytics (via Google Tag Manager) to understand how visitors use my sites. This helps me improve content and identify technical issues. Google Analytics collects:

• Pages visited and time spent
• Approximate location (country/city level, not precise)
• Device type, browser, and operating system
• Referral source (how you found the site)

This data is aggregated and I cannot identify individual visitors. Google Analytics uses cookies to distinguish between visitors.

Managing your preferences: When you first visit, you'll see a banner asking for consent. Your choice is remembered for future visits. The cookie banner controls Google Analytics only - Cloudflare Web Analytics is cookieless and runs regardless of your consent choice. You can also install the Google Analytics Opt-out Browser Add-on.

Hosting logs: My hosting provider (Cloudflare) may collect standard server logs including IP addresses for security purposes. These are automatically deleted after a short retention period.

Cookies: I ask for your consent before setting any cookies. If you accept, Google Analytics sets cookies to measure website usage. If you decline, no cookies are set and no analytics data is collected. No advertising or tracking cookies from other third parties are used.

Interactive tools and experiments

Local storage only

Tools like the Goostrey Daylight Visualiser, calculators, and other interactive experiments.

Data collected: None transmitted to me. Some tools may use your browser's local storage to remember preferences (e.g., your selected location). This data stays in your browser and can be cleared via your browser settings.