Legal notices

Privacy notice

1. What stays on your machine

Every answer you give lives in your own browser, in localStorage, on your own device. It stays there until you clear it. It never expires, there is no account, no session and no token, so there is nothing that can time out and lose your work halfway through. While you are answering, none of it is transmitted anywhere. We run no analytics, set no cookies, and do not track you across this site or any other.

2. What is sent, and only when you complete an assessment

Nothing leaves your browser while you are answering, not one field of it. When you have scored all twenty dimensions, and only then, one row is appended to a spreadsheet. In full, that row is:

• the 20 dimension scores, your floor and your total;
• the scope you declared (one repository, one product, one team's estate, or an organisation);
• your industry, organisation size and country, all three optional;
• a timestamp, and the content version of the ladder you answered.

What the row does not contain: no email address, no IP address, no cookie, no session key, no browser fingerprint, and no identifier of any kind. It also carries nothing about your previous assessments. If you assess twice, the second row says nothing about the first, which means we cannot tell the two apart and neither can anyone else reading the sheet. The optional free-text name you give your scope, such as "Payments", is the one field that could identify an organisation, and it is never transmitted. It stays in your browser and appears only in your own report.

If that write fails, your report still renders. It is never a condition of getting your result.

3. Where it goes

To a Google Sheet, via a Google Apps Script endpoint. Google hosts that in the United States. This was a conscious choice rather than an oversight: EU hosting was considered and set aside because the rows carry nothing personal. If that ever stops being true, this decision gets revisited before anything else does.

4. How to erase it

Everything held on your device can be erased by you, at any time, with the "clear everything" control the assessment carries. Clearing your browser's site data for this domain does the same thing. We cannot see it and cannot recover it.

A submitted row is a different matter, and here is the honest trade-off. Because the row contains no identifier, there is no way to look it up. We could not find your row if you asked us to, which means we cannot retrieve, correct or delete it on request. That is the price of the row being genuinely anonymous rather than merely pseudonymous, and we would rather state it plainly than let you assume otherwise.

No consent banner, and why

Storage on your device here is strictly necessary for the thing you asked for: it exists to hold your own work so a closed tab does not cost you thirty minutes, not to track you, which is the ePrivacy exemption for functional storage. The submitted row carries no personal data and so falls outside the GDPR. A banner would add a click without adding a protection.

When you contact us by email

Emailing the address below creates an ordinary email record, retained for follow-up under the lawful basis of legitimate interest. We treat that exchange as confidential and use it only to answer you. Rights of access, correction and deletion apply to that correspondence in the normal way, and the contact details below are how to exercise them.

Legal entity & contact