Privacy

This page describes what the site actually does today. The site is a set of static files: no server of ours sees your visits. Accounts are optional; without one, nothing about you is stored anywhere but in your own browser.

What we collect

Without an account, nothing that identifies you, ourselves. There is no tracking pixel of ours. Our audience cookies are set only if you accept them in the cookie banner; otherwise the audience is measured without cookies, and errors are always reported without them, as described below. The site shows advertising served by Google, which uses cookies and similar identifiers as described below.

What stays in your browser

Tool progress is saved in your browser’s local storage on the device you are using. Unless you sign in, it never leaves your device and we cannot read it. Clearing your browser data deletes it permanently.

The site also keeps your light or dark theme there, your cookie choice for six months and, if you sign in, your session. None of this needs your consent: it only makes the site work the way you asked.

Audience measurement

To know which pages are read and how fast they load, the site uses Cloudflare Web Analytics. Its script sets no cookie, stores nothing in your browser and is not used to fingerprint visitors. For each page view it reports the page’s address, the site that linked to it, your country, your type of device, browser and operating system, and loading-time measurements. We only see these figures as totals, never visitor by visitor.

Cloudflare processes this data on our behalf. The lawful basis is our legitimate interest in knowing what the site is used for and keeping it fast.

To see how the tools are used, the site also uses PostHog. It records the pages you open and leave, the links and buttons you click (their label, never what you type), your type of device, browser and operating system, the site that linked to you, and loading-time measurements. Requests to PostHog go through our own domain. How it tells visits apart depends on your cookie choice — made in Google’s consent message in the European Economic Area, the United Kingdom and Switzerland, and in our own banner everywhere else:

• If you accept, PostHog keeps a random identifier in a cookie and in your browser’s local storage for six months, so it can recognise your later visits and tell us how many people come back. Your IP address gives your country, then is discarded.
• If you refuse, or until you choose, nothing is stored in your browser: PostHog combines your IP address and your browser’s details with a key that changes every day, keeps only the resulting code and discards the IP address, so one day’s visit cannot be linked to another’s. A Global Privacy Control or Do Not Track signal from your browser counts as a refusal.

Where Google’s message asks, accepting means consenting to storing information on your device and to measuring content or understanding audiences (purposes 1, and 8 or 9, of the IAB Transparency and Consent Framework); refusing any of these keeps PostHog without cookies.

Nothing on your screen is recorded. In our banner, your choice is kept for six months, then the banner asks again, and you can change it at any time with Cookie settings at the foot of every page.

PostHog processes this data on our behalf, in its European Union region, in Germany. The lawful basis is your consent for the cookies, and our legitimate interest for the measurement without cookies.

Error reports

When a page breaks in your browser, the error is reported to Sentry, which we use to find and fix bugs. A report holds the error message, where in our code it happened, the page’s address without anything after it (no query string), your browser and operating system, and the last actions before the error, such as the pages opened and the buttons pressed. It records no IP address and sets no cookie, and nothing at all is sent while pages work: the reporting code only downloads after an error.

Sentry processes these reports on our behalf, in its European Union region, in Germany. The lawful basis is our legitimate interest in a site that works.

If you create an account

Signing in is optional and only by email: we send you a link and a code, nothing else. With an account we keep your email address, the checklist progress you sync, the builds you save and, when those tools open, your votes on codes and the drops you report — so that they follow you from one device to another. That is the whole purpose, and your request is the lawful basis (performance of the service you ask for).

This data is stored by Supabase, our database provider, in its Paris region (European Union), and nobody else can read it: each record is visible to its owner only. It is kept until you delete your account, which you can do yourself at any time from the account page — the account and everything in it go at once. The sign-in emails are sent through an email delivery provider, which sees your address for that purpose only.

Advertising

Ads on this site are served by Google AdSense. Google and its partners use cookies and similar identifiers to show ads, to limit how often you see them, to measure them and to fight fraud; with your consent, also to choose ads from your interests. How Google uses data from sites that show its ads is set out at policies.google.com/technologies/partner-sites.

In the European Economic Area, the United Kingdom and Switzerland, Google’s consent message asks for your choice before any of that happens, and you can change it at any time through Cookie settings at the foot of every page. Wherever you are, you can turn off personalised ads at adssettings.google.com.

Hosting

The site is served as static files by a content delivery network, which processes connection data such as your IP address in order to deliver the page and to protect against abuse.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Without an account we hold no personal data about you; with one, the account page shows what we keep and deletes it on request, and anything else we will answer by email. For data held by Google for advertising, its own tools apply. Contact hello@endgametools.com with any question.

When this changes

This page is updated before, not after, the site introduces a new use of data, such as advertising. Each one adds a processor and a lawful basis that has to be named here first.