Life Audit

Privacy Policy

In effect since 19 September 2026.

Company and contact details

Life Audit is operated by Kobaltstack LLC. In this document, "we", "us" and "our" refer to Kobaltstack LLC, and the data controller for anything described below is Kobaltstack LLC. Write to the address above and a person answers.

What happens to the text you write

The home page has a worksheet: five areas of life, and space to write down what actually happened this week. That text lives only in the memory of your browser tab.

• It is never sent to our server — not while you type, not when you download a file.
• The download button builds the file inside your browser and saves it to your device.
• Print / PDF opens your own system print dialog. We are not part of it.
• Close or reload the page and the text is gone. We cannot recover it, because we never had it.

That is a server setting rather than a promise: the site's Content-Security-Policy header forbids the page from sending data anywhere at all, including to us.

What does get recorded

Web server logs

Like any website, our server records that a request happened: IP address, date and time, the page requested, browser type, and the page you came from. These records keep the site running and let us investigate an outage or an attack.

An IP address counts as personal data, so we say so plainly. Our lawful basis is legitimate interest in keeping the site available and secure. Logs are never linked to worksheet content, never shared with anyone, and kept for no longer than 30 days.

Cookies and third parties

We set no cookies. There are no analytics counters, no advertising pixels, and no fonts or scripts from other domains: everything the page needs is served from this same address.

If we ever add an analytics counter, this policy will be updated before it appears on the site, not after.

What we do not do

• We do not sell or share your data with anyone.
• We show no ads and take part in no ad networks.
• We do not profile you and make no automated decisions about you.
• We collect no health data. The worksheet is an exercise for yourself, not a medical tool; it gives no diagnosis and interprets no answers.

What changes when the app arrives

The Life Audit app is still being built, and none of what follows works today. We describe it in advance so the direction is clear.

• Your entries stay on your device. The app will keep them in your browser, not on our server. That is a property of the architecture, not a promise about the future.
• An account will be optional. The app will work immediately with no sign-up. Signing in will only be needed by people who want their entries on more than one device.
• Sync happens through storage you already own. We plan to support Google Drive: files travel from your browser straight into your own Drive, without passing through our server.

Google user data, in detail

Written out in full, because it matters and because a policy that stays vague here is not worth reading.

• What we will receive from Google: your email address and basic profile (name and picture) via openid, userinfo.email and userinfo.profile; and access to files created by this app via drive.file.
• Why: the identity scopes recognise you when you come back and connect your devices to each other. drive.file is used for one thing only — sync of your own entries to a folder in your own Google Drive.
• What drive.file does not give us: access to anything else in your Drive. We can see only the files this app itself created. We do not request the broader drive or drive.readonly scopes, and we are not going to.
• Where entry content goes: from your browser directly to Google. Entry content does not reach our server, before or after sync.
• What our server does store: your account record (email and an internal identifier) and the Google refresh token, which lets sync continue without asking you to sign in every time. The refresh token is encrypted at rest and is never shared with anyone.
• How to revoke access: disconnect Life Audit at myaccount.google.com/permissions, or write to us and we will delete your account record and token. Either way, files already in your Drive stay yours — deleting them is up to you.

Limited Use. Life Audit's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalised AI or ML models, do not sell it, and do not use it for advertising.

Before any of this is switched on, this policy will be updated to describe what is actually live.

Your rights

Depending on where you live, you may have the right to know what data we hold about you, to correct or delete it, to object to processing, or to receive a copy.

In practice: today we hold nothing that identifies you — no name, no email address, no account. The only thing that exists is server log entries from the past 30 days. If you want those deleted, write to dmitrypetrakov@gmail.com with the approximate time of your visit and your IP address, and we will reply within 30 days.

If you are in the EU or the UK and our answer does not satisfy you, you may complain to your national data protection authority.

Children

The site is not aimed at children under 13, and we knowingly collect no data from them. Since we collect no personal data at all today, there is nothing here to delete.

Changes to this policy

If this policy changes, we update the date at the top of the page. Changes that introduce a new kind of processing are published before that processing begins.

← Back to home · Terms of Service