Where your data actually lives

In your browser's local storage, which is a private area of the browser on the device you are using. It is written when you type and read when you return. It never travels.

Two consequences worth knowing, because they cut both ways:

• It does not sync. Set it up on your laptop and it is not on your phone. Create a backup on the Setup tab downloads a file you can keep, or gives you the same thing as text to move to another device. It leaves names out unless you ask for them, and it goes wherever you paste it — so paste it into Onstrength, not into a chat window. Restore only a backup you made yourself.
• Clearing your browser data deletes it. If you clear site data, use a private window, or your organisation wipes browser storage on a schedule, what you have built goes with it. Saving a copy is the only backup there is, because there is nowhere to back it up to.
• Anyone who can unlock the device can read it. There is no password on this. Your device lock is the lock. Do not use Onstrength on a shared or public computer, because it stays in that browser for whoever sits down next.
• Browser sync can carry it off your device. If your browser signs in to a personal account and syncs its data, your data can travel with it to somewhere your organisation did not choose. Worth checking, on a work device especially.

What the site itself can see

Being straight about this, because "nothing leaves your browser" is true of your data but not of the fact that you visited:

• No analytics, no tracking, no cookies. There is no Google Analytics, no pixel, no advertising network, and nothing that follows you anywhere.
• The pages are hosted on GitHub Pages, which — like any web host — records requests in its own server logs, including IP addresses. That tells GitHub someone loaded a page. It tells them nothing about what you typed into it.
• The typefaces load from Google Fonts, which means Google's servers see the request for the font file, and with it your IP address. Again: the page content, and everything you enter, is never part of that request.

If you send feedback

Onstrength then has your email address and whatever you chose to write, the same as any email. It is used to reply, and to fix what you reported. You are not added to any list, and there is nothing to unsubscribe from.

Please do not paste real salary data into a feedback email. Onstrength does not need it.

If this changes

This would only change if Onstrength gained something that needed a server — accounts, sync, or saved history. If that ever happens it will be obvious, because you would have to sign in, and this page will say so before it does.

Contact

Questions, or anything here that does not match what you observe:
Feedback