What's actually collected, in plain language.

No legal boilerplate — this is the real, complete list of what this site, the RadioBook account server, and the DT Prep app store, and why. If something here surprises you, that's a bug in the site, not in this page.

• Name, email, and a password — the password is never stored in plain text, only a salted scrypt hash of it. I can't see or recover your actual password, only reset it via a token if you use the "forgot password" flow
• Your callsign, if you choose to add one — entirely optional
• Whether you're subscribed to new-post emails — on by default when you sign up, toggle it off anytime from your dashboard
• A login session token, so you don't have to log in on every visit — these expire after 30 days of inactivity

• Whatever name, email, and message you submit — sent to me directly and kept so I can follow up
• Your IP address, briefly, only to rate-limit spam (max 5 messages per minute per IP) — not stored alongside the message itself

• Failed sign-in attempts and new sign-ups are counted per IP address, in memory only, to stop password guessing and mass sign-ups — these counts are never written to disk and clear themselves within an hour

• A first-party page-view beacon records the page, your IP address, your rough location (city/country, resolved from that IP through a free lookup service), browser, OS, device type, language, timezone, screen size, and what site referred you. These records stay on this server and are only used for the site's own traffic numbers
• No cookies, no Google Analytics, no third-party trackers, no ad networks — the beacon posts directly from the page to this server and nowhere else
• If you're signed in, none of this is recorded — signed-in visits are excluded entirely, both by the page itself and by the server, so my own use of the site never appears in these numbers
• Downloading the APK records the same kind of information (browser, OS, rough location) but not tied to any account — it's a plain file download

• DT Prep has no internet permission at all, so it physically can’t send anything anywhere — not to me, not to anyone. There’s no account, no analytics, and no crash reporting
• Everything you put in it (plans, contacts, medical info, checklists) stays in the app’s storage on your phone. Uninstalling the app deletes it
• It only leaves your phone when you choose to: showing a QR code to someone else’s camera, saving a backup file, or exporting a PDF — and those go wherever you put them, never to me
• Camera is used only to scan a shared plan or template; location only when you ask for your current position or distance to a pin; notifications only for reminders you turn on
• Downloading the APK from this site is logged like any other download (see “Just by visiting” above) — that’s the website, not the app

• No payment or financial information — everything here is free
• No precise location, ever — only the rough city-level estimate a visitor's IP resolves to
• No data is sold, shared, or handed to advertisers, because there isn't an advertiser relationship of any kind on this site

• ip-api.com — resolves visitor IPs to a rough city/country; it sees the IP address for that lookup, nothing else about you
• Resend — sends the actual emails (contact-form notifications, new-post alerts, password resets); it sees the recipient address and message content for whatever it's asked to send
• Cloudflare — every request to this site passes through Cloudflare on its way to my server (that’s how the site is reachable at all), so Cloudflare handles your IP address and the request like any network provider would
• Nobody else. No analytics platform, no ad network, no other third party.

Delete your own account anytime from the dashboard, or get in touch and I'll remove it by hand. Deleting an account removes your name, email, password hash, and callsign immediately — it doesn't retroactively scrub past analytics beacons, since those were never tied to your account in the first place.

Questions about any of this? Ask directly.