Privacy policy

Contact Plan Designer (contact-plan-designer.space) · Last updated: 22 July 2026

Who we are

This site is operated by the Contact Plan Designer team, the maintainers of the open-source Contact Plan Designer research tool. For any privacy question or request, please open an issue on the project issue tracker.

What this site stores in your browser

No advertising or third-party cookies are used. The site stores only what it needs to function:

• cpd_session cookie: an opaque, HTTP-only session id that keeps your work isolated from other visitors on the shared demo server. It expires with the server-side session and identifies your browser session, not you.
• cpd_sid (sessionStorage, per tab): the same kind of opaque session id, one per browser tab.
• cpd.layout.v1 (localStorage): your panel-layout preference.
• cpd-demo-banner-dismissed (localStorage): whether you dismissed the public-demo notice.
• cpd-consent.v1 (localStorage): your privacy choice from the consent banner.

First-party analytics

To understand how this research tool is used, the server keeps its own usage statistics. No third-party analytics or tracking service is involved. For each page view and API request the server may record: a timestamp, the endpoint called, the response status and duration, a coarse location derived from your IP address (country, region, city and city-level coordinates), and a salted cryptographic hash of your IP address. The raw IP address is never stored; it is used only transiently to derive the location and the hash, and the hash cannot be reversed into your address.

The legal basis for this processing is our legitimate interest in operating, securing and improving a free research tool (GDPR art. 6(1)(f)). You can object at any time with one click, using the banner or the toggle below.

Scenario storage for research

When you run a custom or modified scenario, its YAML text (with the scenario name, your coarse country and the same salted hash) may be stored, so we can understand what the tool is used for and improve it, and possibly turn interesting scenarios into built-in examples. Opting out of analytics also stops this. Please do not paste confidential or personal data into scenarios.

Hosting and processors

• Vercel Inc. serves the static site and proxies API calls; in transit it derives the coarse geolocation from your IP address. Its standard, short-lived infrastructure logs apply.
• Hugging Face Inc. hosts the compute backend; its standard infrastructure logs apply. Backups of the analytics database (containing only the data described above, never raw IPs) may be stored in a private Hugging Face storage bucket.

All page assets (including the 3D and timeline libraries) are served from this site itself, so simply loading the page sends your IP address to no one beyond these hosting providers.

Retention

Analytics events are automatically deleted at most 24 months after collection. Stored scenarios are kept for the duration of the research project.

Your choices and rights

The consent banner offers OK (keep the default: essential cookie plus first-party analytics) or Disable analytics. Opting out takes effect immediately: the page-view beacon is no longer sent and every request to the server carries an opt-out flag that prevents it from being recorded. You can change your choice at any time below, or via ? Help → Privacy in the app.

Under the GDPR you also have rights of access, rectification, erasure and objection; contact us via the issue tracker linked above. Note that analytics records are keyed by a salted hash, so we generally cannot link stored records to you unless you provide information that identifies your entries.