Privacy

This site sets no cookies, runs no analytics, and never receives what you type into it. That is the whole summary. The rest is the detail, because a promise with no detail behind it is just a nicer way of saying nothing.

Last updated 19 September 2026.

Who is responsible

Stimpunks Foundation, a 501(c)(3) non-profit, publishes this site and is the data controller for it. For anything on this page, including a request about your own information, write to stimpunks@stimpunks.org. A postal address is available on request through our contact page.

What we collect

Nothing you give us, because there is nothing here to give. No accounts, no sign-up, no newsletter, no comments, no contact form, no payment. Every sheet, PDF, and prompt downloads without identifying you.

Two things happen anyway, and you should know about both.

Our host keeps server logs

The site is served by Netlify, which records the ordinary things a web server records: the IP address a request came from, the time, the page, and the browser's user-agent string. An IP address is personal data, so this is worth saying plainly rather than filing under "technical". We do not read these logs page by page, we do not join them to anything else, and we have no way to connect them to a person. They exist so the site can be served and abuse can be stopped.

Netlify processes this on our behalf under its own privacy policy, and it is a US company, so this involves a transfer outside the UK and EEA under its standard contractual clauses. The lawful basis is our legitimate interest in running a website at all (UK/EU GDPR Article 6(1)(f)).

We would like to tell you exactly how long those logs are kept, and we cannot: Netlify's privacy statement says only that it retains data "for a period of time consistent with the original purpose of collection" and asks you to contact it for the specifics. We would rather write that down than print a confident number we have not verified. We keep no copy of the logs ourselves, and we retain nothing at all beyond what Netlify holds.

Your browser remembers your packet, on your device

If you tick sheets for a packet, this site stores that list in your own browser using localStorage, under the key whysheets.packet.v1. If you type a name and a date on the packet cover, those are stored the same way, under whysheets.cover.v1, so you do not have to type them again.

Neither is ever sent to us or to anyone else. They sit on the device you are using, we cannot read them, and no request carries them anywhere. This matters more here than in most places: the name on a packet cover is often a child's. Clear your browser's site data for this domain and both are gone. Nothing breaks if you do — the site works with no stored state at all, and works in a private window where storage is blocked outright.

These are not cookies, nothing about them is used to track you, and they are strictly necessary to the feature you asked for, so there is nothing here to consent to.

What we do not do

• No cookies. Not ours, not anyone's.
• No analytics. We do not know how many people read any sheet.
• No third-party scripts, fonts, or embeds. Every script, stylesheet, and font on this site is served from this domain. Your browser makes no request to any other company while you are here — which is also enforced by the site's Content-Security-Policy, not merely promised.
• No advertising, no trackers, no fingerprinting, no data sold or shared.
• No profiling and no automated decisions about anybody.

The packet builder, and the prompts

The packet builder assembles your PDF in your browser. It downloads the same public PDFs anyone can download and joins them on your device. Nothing is uploaded, and no record of which sheets you chose exists anywhere but your own machine.

The companion prompts are plain text files you copy. What you then type into your own AI assistant — your child's name, their school, what happened — goes to whoever makes that assistant, under their terms, and never to us. We never see it. Before you paste anything about a child into any assistant, it is worth knowing that company's policy on keeping and training on what you type.

Your rights

Under the UK GDPR and EU GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, and to data portability. In practice we hold nothing that identifies you, so for almost any request the honest answer is that there is nothing to produce. Ask anyway if you want that confirmed in writing — write to stimpunks@stimpunks.org and we will answer within one month.

If you are unhappy with how we have handled it, you can complain to your own supervisory authority — in the UK the Information Commissioner's Office, and in the EEA your national data protection authority.

Children

This site is written for adults advocating for children, not for children, and it asks nobody for their age. It collects no information from anyone, so it collects none from a child either. The child a packet is about is named only on your own device, if you choose to type it.

Changes

If this changes, the date at the top changes with it, and the change is recorded in this site's public repository along with everything else here — so you can see what it used to say, not just what it says now.