Privacy Policy

Anchor · dbappsystems.com · Effective July 14, 2026

This policy also serves as the Consumer Health Data Privacy Policy required by the Washington My Health My Data Act, RCW 19.373. There is no separate document. Everything is here.

The short version

Anchor does not know who you are. It cannot know who you are. There is no account, no email address, no password, no phone number, no name, and no way for us to contact you or identify you. We could not tell a court who you are, because we do not have that information and never collect it.

What Anchor stores

When you write an entry, four things are saved:

• The words you wrote
• Which question produced them
• A time-horizon label (+7d, +30d, and so on)
• The date it was written, a count of how many times it has been shown to you, and when it was last shown

The count and the last-shown date exist for one purpose: so the app does not show you the same page every night. They are read by the rotation logic and used for nothing else.

What Anchor does not store

• No identity. No name, email, phone number, password, username, or account of any kind.
• No record that you were here. There is no session log, no visit log, no table recording when you opened this app or how long you sat with a page. This was deliberately removed from the design. A record of the hour a person opened an app like this is a liability to that person with no benefit to them, so it does not exist.
• No judgement. There is no field anywhere in this system that records whether you did or did not do anything. No streak. No outcome. No relapse. No score. The database is structurally incapable of grading you.
• No cookies. No analytics. No advertising. No trackers. No pixels. No fingerprinting.
• No third-party requests. Anchor loads no fonts, scripts, or assets from anyone else's server. When this page is open, your browser talks to exactly one server: ours. Nothing about your visit is visible to Google, Meta, or anyone else, because nothing is sent to them.

How your key works

The first time you use Anchor, your browser generates a random key and stores it on your device. It is never emailed, never registered, and never transmitted anywhere except to our own server on each request.

Our server never stores that key. It stores only a one-way SHA-256 hash of it. The hash cannot be reversed into your key. Your entries are grouped under the hash, and there is no path from that hash to a person, a device, an address, or a name.

If you lose your key, your entries are unrecoverable. Not "difficult to recover" — unrecoverable. We have no mechanism to identify you, verify you, or restore anything to you. That is the direct cost of building it this way, and we chose to pay it rather than hold identifying information about you.

Consumer health data

Washington's My Health My Data Act defines "consumer health data" broadly and includes information relating to sexual health. We treat everything you write in Anchor as if it were consumer health data, whether or not it legally qualifies, and we apply the following to it:

• Collection is limited to what you type. Nothing is inferred, derived, extrapolated, appended, enriched, or purchased about you.
• Nothing is shared. Not with affiliates, not with partners, not with advertisers, not with anyone.
• Nothing is sold. Not now, not later, not in a bankruptcy, not in an acquisition. There is no lawful basis on which we would seek an authorization to sell, because we will not sell.
• No geofencing. Anchor does not request, receive, or process your location by any means.

We believe the data held under a key hash is de-identified within the meaning of the Act, because it cannot reasonably be associated with an identified or identifiable natural person and we make no attempt to re-identify it. We state that position plainly rather than relying on it silently. If you believe otherwise, exercise your deletion right below — it works immediately and without argument.

Your rights

You do not have to ask us for these. They are buttons in the app.

• Access — the Ledger screen shows everything held under your key. That is the complete record. There is no other copy and no hidden field.
• Export — "export" downloads all of it as a plain text file.
• Delete one — "remove" on any entry deletes it immediately and permanently.
• Delete everything — "erase everything under this key" on the Key screen deletes every entry immediately and permanently, including from our systems. There is no soft delete, no archive, and no recovery.

Because we cannot identify you, we cannot process a rights request by email — we would have no way to know whose data to act on, and honoring such a request would require us to hold exactly the identifying information this design exists to avoid. The buttons are the mechanism.

Who else touches this

Anchor runs on Cloudflare (Workers, Pages, and D1). Cloudflare processes and stores the data on our behalf as our processor and is bound by its own terms and data protection agreement. Cloudflare receives your IP address in the ordinary course of serving any website, as every host does. We do not log it, retain it, or associate it with anything you write.

There are no other processors, vendors, SDKs, or integrations. That list will not grow quietly. If it ever changes, this page changes first.

Retention

Entries are kept until you delete them or until the service ends. There is no background expiry, and there is nothing to retain about you beyond them.

Children

Anchor is for adults. It is not directed to children, does not knowingly collect data from anyone under 18, and has no content, advertising, or feature intended to appeal to minors. If you are under 18, do not use this.

Security

Transport is HTTPS. Data at rest sits in Cloudflare D1 under Cloudflare's security controls. Access to the production database is limited to the operator. The strongest security measure here is not technical: the safest data is the data we never collected, and we collected almost none.

Changes

If this policy changes, the effective date at the top changes. We will not make a change that quietly widens what is collected or who receives it. If that ever becomes necessary, the service ends instead.

Contact

dbappsystems.com. Because Anchor holds no way to reach you and we hold no way to identify you, correspondence about a specific entry is not possible. Use the buttons.