Privacy & cookies.

01 / YOUR DATA

What Brennord saves

As a guest, your checklists, linked words, completed items and display preferences stay in this browser’s local storage. Opening this information page does not sign you in or create a Brennord login cookie.

When you create an account, verifying your email code in the same browser signs you in and transfers your guest checklist to the new account. A recovery copy stays in this browser until the transfer is confirmed; if it fails, you can retry or download a backup. Signing in to an existing account discards the current guest checklist and loads that account’s saved data instead.

When you use an account, Brennord also saves your checklist data and preferences on its server so they can be loaded after you sign in.

Account details

Username, email address when provided, account role, creation date and email verification status. Passwords are stored as hashes, not readable passwords. We use these details to manage access, verify email addresses and reset passwords.

Lists and preferences

Categories, task text, links, completion dates, items in the trash, personal lists and display settings. An optional profile photo is resized in your browser before it is saved.

Community templates

When you submit a template, its selected categories, task text and links are sent to administrators for review. After approval, your username, template and aggregate likes, dislikes and uses are visible to signed-in community members, including author search and your community profile. Your private checklists, email and completion history are not published. Reactions and first successful template imports are linked to accounts to avoid repeated counts. You can withdraw your own submission or published template immediately; copies already imported by other people stay in their own checklists. Only authors with published templates appear in community author search. A template report retains a copy of the reported template for administrator review. A restriction can prevent access to Templates while leaving your personal checklist available. Its reason and any unban request are visible to administrators and the affected account.

Help and feedback

Your report type, title, message and contact email when supplied, or your account email when signed in, plus your account reference. Administrators can read reports to respond and manage them. Do not include passwords or sensitive personal information.

Access and security

Session and account-action records, plus counters to limit repeated login attempts and email requests. Some counters use hashes derived from an IP address or email address; this is pseudonymisation, not a guarantee of anonymity. When a connection exceeds a limit, we also keep its IP address, affected action and expiry time so the site owner can review and remove the temporary block. These records are private and are not included in the public website.

02 / DATA PROTECTION

How your data is protected

The browser, account database and shared templates do not all store data in the same way.

Passwords and access

New and changed passwords use salted scrypt hashes, rather than reversible encryption. Older SHA-256 hashes are upgraded after a successful sign-in. Verification, reset, activation and session tokens are stored as SHA-256 hashes in the database.

Connection and database

HTTPS encrypts data between your browser and Brennord. Cloudflare D1 also encrypts stored database data automatically with AES-256. Read Cloudflare’s D1 security documentation.

Private account lists

Private account checklists, personal tasks and display preferences have an additional AES-256-GCM encryption layer managed by Brennord. Ordinary users can access only their own private account data. Your optional profile photo is handled separately because it can appear on your community profile.

Browser and backups

Guest lists and local copies of account lists remain readable in this browser’s local storage; Brennord does not add encryption to them. Downloaded .brennord and JSON backups are readable too. Protect access to your device and any copies you save.

Sharing and service records

Your username, optional profile photo and submitted template content are visible for moderation; published templates are visible to signed-in community members. Email, account status, identifiers, reactions, imports and security records use database protection rather than the extra list-encryption layer. Administrators can read reports, ban reasons and unban requests.

This is not end-to-end encryption: authorized Brennord services and operators with the required access can read account data. You do not need an extra passphrase or recovery code. Normal email password recovery remains available for accounts with a verified email.

03 / COOKIES & BROWSER STORAGE

Small pieces that keep things working

Brennord’s application uses the following essential cookies. It does not add advertising cookies or marketing tracking pixels. Cloudflare’s cookie-free performance analytics are described below.

The preview password is no longer required. An old brennord_preview cookie may remain from a previous visit until its 24-hour expiry; it no longer controls access to the site.

These cookies are protected from access by page scripts (HttpOnly), restricted with SameSite=Lax for sign-in and SameSite=Strict for signup, and sent securely over HTTPS. They are used for the access you request, so there is no “Accept all cookies” choice for them.

Cloudflare security checks

Cloudflare Bot Fight Mode is enabled to help detect automated abuse. Its checks process connection and browser signals and may set essential security cookies: __cf_bm expires after 30 minutes of inactivity; cf_clearance remembers a security-check result for the duration configured by Cloudflare.

Cloudflare security cookies documentation

Local storage and session storage

Your language choice is saved in this browser and, when signed in, in your account so you can use it on other devices.

Local storage holds guest checklists, a local copy of account lists, preferences and your optional profile photo. It has no automatic expiry. Brennord also uses a local marker to coordinate account changes between browser tabs.

Session storage temporarily keeps the email verification context and the tokens needed to use verification, password reset and account activation links. It lasts for the browser tab’s session; action tokens are removed after successful use. Passwords are not saved in this storage.

Logging out or changing accounts clears the local account cache and account-related session data, then creates a new account-change marker. Your chosen site language, dismissal of the home introduction and any guest checklist still awaiting transfer are kept in this browser. You can clear them with site data in your browser. This does not delete data saved in your account.

04 / STORAGE TIMES

How long things stay

Saved account information remains until it is changed or deleted. Items placed in a checklist’s trash remain there until permanently removed. Account deletion is currently handled by an administrator: contact us to request it.

Email verification and account activation links are valid for 24 hours; password reset links are valid for 30 minutes. A link becoming invalid does not automatically delete its database record.

During this beta there is no automatic deletion schedule for account records, feedback or email-request counters. Login-attempt counters are cleaned up during later requests. Provider logs, backups and email copies can have separate retention periods; these details are still being reviewed for the full privacy notice.

Temporary connection blocks last 5 minutes for login attempts and 10 minutes for email or report requests. Expired blocked-IP records are deleted during later eligible requests or when the owner exports the active block list. Private exported copies are kept until the owner deletes them.

Clearing your browser can remove guest lists permanently. Save a copy of any lists you want to keep before clearing site data.

05 / PROVIDERS & LINKS

The services behind Brennord

Cloudflare hosts the website, its server functions and account database. Like a hosting provider, it handles network requests, including IP addresses and request information. Depending on its security features, it may use additional essential security cookies. See Cloudflare’s privacy policy.

Some pages also use Cloudflare Web Analytics to measure visits and page performance. Cloudflare describes this service as cookie-free and says it does not use local storage or fingerprinting to track visitors. See Cloudflare’s explanation of privacy in Web Analytics.

Lark Mail sends account verification and password reset emails from [email protected]. These account emails are not marketing messages. See Lark’s privacy policy.

Image search ratings

When signed in, rating a search image saves its identifier, a hash of the normalized search phrase, your account reference, your vote and its update time. One account has one changeable vote per image and search. Likes help prefer relevant photos; dislikes hide that photo from your future previews for the same search. Only aggregate counts are shown to other users. These hashes are pseudonymous, not anonymous. Votes are deleted when the account is deleted.

Without signing in, image choices stay in this browser and do not add votes to community totals. You can use Reset image choices in Settings to clear your choices for one search. Clearing browser data also removes guest choices; account choices remain saved until you reset them or delete your account.

A dislike can include an optional reason: not relevant, poor quality or problematic content. Adding a reason does not automatically send the readable search to administrators. If you separately choose Send image and search to moderators, your search phrase, image, reason and account reference are submitted for review. Administrators can record reversible decisions and their reasons, with the administrator and date retained in a decision history.

Previously selected Wikimedia Commons image addresses remain saved with their task links, separately from ratings. These addresses are included in account saves and readable checklist backups. Sharing a template can also share a previously selected image address.

Image searches and semantic assistance

For img: searches, Brennord searches Wikimedia Commons and retrieves public photo metadata. Commons receives the search from Brennord’s server. Thumbnails are loaded through Brennord’s image proxy. Opening the image-search link takes you to Google Images, whose own rules then apply.

When semantic assistance is available, Cloudflare Workers AI processes the search phrase after img: and public image titles, categories and captions to identify subjects and requested details and compare related searches. Brennord does not send the rest of your task or checklist to this AI service. Background preview loading can trigger this processing before you open a preview. If the service is unavailable or a limit is reached, ordinary metadata-based image search continues.

The semantic index stores search hashes, hashed subject and detail labels, numerical representations called embeddings and update times. It does not store readable private search phrases in this index. Hashes and embeddings are not anonymous or end-to-end encrypted and may reveal information about a search. Semantic index entries older than 30 days are removed during later image searches; the index is also limited to its 2,000 most recently updated entries. Temporary server caches can retain a search and its results for up to one hour. The administrator search catalogue contains searches deliberately entered by administrators and searches voluntarily reported by users; it does not list private checklists.

Link previews

When a preview is requested, Brennord receives the link’s address and fetches the page and selected images through its server. It does not forward your browser cookies or your IP address to that external website. Preview results can be cached for up to one hour.

The external site sees a request from Brennord’s hosting service. Avoid adding links containing private access tokens or confidential information. If you open an external link, that website’s own privacy and cookie rules apply.

The processing locations, contractual safeguards and any international transfers involving these providers are still being confirmed. This page does not claim that all data remains within the European Union.

06 / YOUR CHOICES

Questions, corrections or deletion

You can edit your lists and preferences, remove individual items, log out and clear data stored in your browser. Blocking essential cookies can prevent signing in.

To request access to your account data, a correction, deletion, restriction, portability or to object to processing where applicable, email [email protected]. We may need to verify that the account belongs to you. Never send your password.

You can also make a complaint to the relevant data protection authority. In Italy, this is the Garante per la protezione dei dati personali.