Privacy

Last updated: 19 July 2026

Summary

We do not collect your personal data. Not because we promise not to, but because the system has nowhere to put it.

No account. No login. No device identifier. No tracking cookies. No third-party analytics SDKs.

Your data stays on your device

The ledger, your pretend order history, and all settings are stored in your browser using IndexedDB. They are never sent anywhere. We cannot read them. If you clear your browser data or press Erase all data in Settings, they are gone, and no copy exists elsewhere.

A direct consequence: the ledger does not sync between devices, and cannot move from the web to the app. With no account, there is nothing to link the two records. That is a cost we considered and accepted.

The only thing sent to a server

When a pretend order completes, your browser sends a request containing exactly two numbers: the simulated total and the item count. It carries no user id, device id, session id, cookie, or browser fingerprint.

The server adds those to a daily total and forgets immediately. The counter holds only a date and a sum — there is no way, now or later, to trace any single order back to a person.

IP addresses are used transiently for rate limiting, as a hash salted per day, held in process memory and expiring after a minute. IPs are not written to disk and are never logged alongside order data.

What we do not do

• We do not sell, share, or transfer data to third parties. There is no data to sell.
• We do not send push notifications, emails, or reminders to come back.
• We do not build user profiles, measure conversion funnels, or run retention cohort analysis.
• We do not run ads or embed ad network tracking code.

Legal basis

The product is designed so that most obligations under Vietnam's Decree 13/2023/ND-CP on personal data protection do not arise, because no personal data processing takes place. The same applies for users in GDPR jurisdictions: with no personal data collected, no controller relationship arises over user data.

If you believe this reading is wrong on some point, contact us and we will correct it.

Your rights

Because we hold none of your data, there is nothing to request access to, rectify, or erase on our side. All of your data is on your device and you can erase it at any time in Settings, immediately, without giving a reason.

Children

The product is not directed at children and collects no data from anyone, children included.

Changes

If this policy changes, the date at the top changes with it. Because there are no accounts, we have no way to notify you individually — the current version always lives at this page.