Privacy · Diffhall

No account

There are no accounts, names, email addresses or passwords. Diffhall sends no email.

Your notebook

If you choose to save a read, Diffhall makes a notebook: a random 12-character code, stored with the date it was made and last opened, and for each hand-in the bench, the counts (caught, missed, false flags) and the time. Which lines you ticked is not stored. The code sits in one cookie on your device (__Host-dh_nb, secure, HTTP-only, 180 days). Anyone holding your private link can see the counts. "Forget this notebook" deletes it at once; a notebook unopened for 180 days is deleted automatically.

Other cookies and records

Pages with a form set a security cookie (__Host-dh_csrf) that stops other sites from submitting forms as you. To limit abuse, Diffhall counts hand-ins per address per hour, keeping only a salted one-way hash of the address for two days. The server's ordinary access logs are kept by the host. There are no analytics services, no outside fonts and no advertising or tracking cookies. The only outside script any page loads is the adengine.us banner on the public pages, described under Advertising; it also counts one page view per page as a daily total.

Advertising

The lobby, the room directory and each room, each review bench before you hand in, Pricing and About show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind Diffhall. For now the ads are for WeldonPC's own services. A handed-in read, your notebook, the Review Card, this page and the terms show no ad.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site with those requests. They never carry your notebook code or what you ticked.

No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
Nothing about you is sold or shared.

Payments

Checkout is not switched on during the preview. When it opens, payments will be handled by PayPal; Diffhall will keep only the plan, its dates and PayPal's reference, never card details.

Contact