Legal

Privacy policy

What this site collects, why, and what it does not do with it. Written to be read, not to be skimmed past.

What is collected

The site collects information in two situations.

  • When you submit a tool. The submission form records the tool name, the official product URL, the workflow you selected, any evidence notes you write, and the time the form was received. This is stored so an editor can review the entry.
  • When you sign in. If an account is created, the site stores the email address and a hashed password. Signing in sets one session cookie so the site knows you are signed in.

No account is required to browse the directory, and no personal information is collected from ordinary visitors.

Cookies

The site sets one cookie, and only after you sign in: ledgeratlas_session. It is httpOnly, SameSite=Lax, and expires after seven days. Signing out removes it.

The light or dark theme preference is kept in your browser's local storage and is never sent to the server.

Google Analytics sets two first-party cookies, _ga and _ga_<container>, to tell repeat visits apart. They expire after up to two years. There are no advertising cookies and no cross-site tracking cookies.

Third parties

One third-party service is loaded: Google Analytics 4, which reports aggregate page views and traffic sources. It receives the page you visited, your referrer, and a pseudonymous identifier from its cookies, along with the IP address and user agent your browser sends. Google processes this on our behalf under its own terms. Advertising features, Google Signals, and ad personalisation are switched off, so the data is not used to build advertising audiences.

No data collected here is sold, rented, or shared with data brokers.

The site is served through a content delivery network for performance and security, which processes requests in order to deliver pages.

How information is used

Submission details are used to review and, where appropriate, publish a record. Account details are used to keep you signed in. Analytics data is used only to understand which pages are read and where visitors arrive from. Nothing collected is used for profiling, and nothing is used to build advertising audiences.

Retention

Submission records are kept while they are useful for editorial review. Account data is kept until the account is closed. Session cookies expire on their own after seven days. Google Analytics event data is retained for 14 months.

Your rights

You can ask what personal information the site holds about you, ask for it to be corrected, or ask for it to be deleted. Write to [email protected] with the email address associated with the request and it will be acted on.

Children

This site is a reference for people working in accounting and bookkeeping. It is not directed at children under 13, and personal information is not knowingly collected from them.

Changes

When this policy changes materially, the date at the top of the page changes with it. Continued use of the site after a change means the updated policy applies.