Cookie and Local Storage Notice
Under legal review. Awaiting review by a qualified lawyer. Every fact we have not yet confirmed is shown as a visible marker rather than filled with a plausible-looking value, because a privacy policy naming the wrong legal entity is worse than one that visibly has a gap in it.
These documents are published in English only. The rest of this site is bilingual; these pages are not, because machine-assisted translation of a legal document is worse than none — a mistranslated legal basis is a liability rather than a courtesy. A reviewed Swedish translation will follow.
We do not show you a cookie banner, and here is why
Under the ePrivacy Directive as implemented in Sweden, consent is required for storing information on your device except where the storage is strictly necessary to provide a service you have explicitly requested. Everything this site stores falls within that exception, so there is nothing to consent to.
We could have added a banner anyway. We have not, because a consent request for something that does not require consent teaches people that banners are meaningless, and because we would rather explain than interrupt.
Everything this site stores on your device
| Key | What it holds | Set when |
|---|---|---|
| kv-assess | Your Church Health Index answers and position | You answer a question |
| kv-lead | Your Leadership Health Assessment answers and position | You answer a question |
| kv-lang | Your choice of English or Swedish | You switch language |
| kv-group | A group reading's code, its encryption key, your respondent group, and — for the person who opened it — the token that deletes it | You open or join a group reading |
All four are browser local storage, not cookies. This site sets no HTTP cookies of any kind.
None of the first three is ever transmitted. Of kv-group, the code is sent with each request, because the server has to know which reading you mean. The encryption key is not, and neither is the delete token. Both are held in the link fragment and in your own browser; a fragment is not part of a web request, so they do not reach the server or its logs. That is the mechanism the whole privacy claim rests on, and it is checkable in your browser's network inspector.
Removing it
Clearing your browser's site data for this domain removes everything above. It will also permanently delete any assessment in progress and any completed report you have not saved elsewhere, because we hold no copy and cannot restore it.
If you have opened a group reading, clearing site data also destroys your only copy of its encryption key unless you saved the facilitator link somewhere else. The responses would remain on the server, and nobody — including us — would be able to read them again. Save that link before you tidy up.