Your addresses never leave your browser.
This is the part of the product we care most about getting right, so here it is in plain language before the legal version. Two exceptions are worth naming up front: if you turn on risk alerts you give us an email address, and the site runs one cookieless analytics product. Both are described below.
What we never receive
The Family Survival Plan and the Atlas run entirely as JavaScript in your browser. The ZIP codes, addresses, family names and travel patterns you enter are processed on your own device and are never transmitted to any server we control. We could not hand them over if we were asked, because we do not have them. Close the tab and they are gone.
If you turn on risk alerts
This is the one place on the site where you hand us something, so it is worth being exact about what.
We store three things: your email address, the index threshold you chose, and whether you want same-day jump alerts. That is the entire record. There is no name field, no ZIP code field, and no account. Your family plan is never part of it and is never uploaded, which is the promise at the top of this page and is not weakened by subscribing to alerts.
What we use it for: sending you the alert you asked for, and nothing else. We do not send marketing to alert subscribers, we do not add you to any other list, and we do not sell, rent or share the address. Every alert email carries a one-click unsubscribe, and unsubscribing deletes the record rather than flagging it.
How long we keep it: until you unsubscribe. If an address hard-bounces twice we delete it without being asked. If you never confirm the subscription, the pending record is deleted after 30 days.
Who else touches it: the email is stored on Cloudflare infrastructure and handed to our sending provider at the moment an alert goes out, because that is what delivering email requires. Neither is permitted to use it for anything else.
To delete it right now: use the unsubscribe link in any alert, or email [email protected] and it is gone the same day. You do not have to explain why.
Alerts are a paid feature, so if you subscribed through checkout, Stripe also holds your billing details under the terms below. The alert record and the billing record are separate, and deleting the alert record does not cancel a subscription.
What we do receive
Standard web server logs when you load a page: IP address, user agent, the page requested, and a timestamp. These are handled by Cloudflare as our hosting provider and are used to keep the site running and to see which pages people read.
If you buy something, Stripe processes the payment. We receive your email address, name and what you bought. We never see or store your card number. Stripe's own privacy policy governs that transaction.
If you email us, we have your email.
What we do not do
We do not sell data. We do not run advertising networks or behavioral trackers. We do not build a profile of you across other sites. The gear section links to ordinary merchant pages. We currently have no affiliate relationships and earn no commission from any of them, and each link says so on the page. If that changes, the paying links will be marked and this paragraph will change on the same day. We would not share customer lists with such a partner in any case.
Cookies and analytics
The site sets no advertising cookies and no analytics cookies. It runs one analytics product, Cloudflare Web Analytics, and that product is cookieless by design: it stores nothing in your browser, sets no identifier, and cannot follow you to another site. Our host adds it at the edge, so there is no tracking script in our source code, which you can verify by reading the page source.
What it records is aggregate: which page was loaded, when, the referring site, and the country, device type and browser derived from your request. No cookie, no persistent identifier, no profile, and nothing we could tie back to a person. We use it to see which pages people read. Turning on risk alerts sets no cookie either: the subscription lives in our store, not in your browser.
Your rights
If you are in the EU, UK, California or another jurisdiction with data rights, you may request a copy of what we hold, correction, or deletion. Email [email protected]. Because we hold so little, most of these requests resolve in a sentence.
Last updated September 28, 2026. This page describes actual practice. If the practice changes, this page changes on the same day.