What Lend Shelf keeps.

What is stored

• A shelf: its name, loan length, settings, a scrambled (SHA-256) copy of the manager code and the counter code. No account, no email address, no password.
• Laptops: the names, models, asset tags and kit the manager types.
• Loans: the borrower's name as typed, times out and back, due date, kit out and back, whether it worked, notes, which hand-back steps were ticked.
• Abuse limits: daily counters keyed by a salted hash of the visitor's address (never the address itself), deleted after two days.

Text fields refuse links, email addresses and long numbers (such as phone numbers), because anyone with the counter link can read the counter pages. Use first names and an initial. Please do not record children.

Who can see it

Anyone holding the manager link sees everything on that shelf. Anyone holding the counter link sees the laptops, their state and due dates, and the borrowers' names unless the shelf hides them at the counter. Shelf pages are marked so search engines do not index them. WeldonPC, which runs the server, can see the database when maintaining it and does not use it for anything else.

How long

Loans are deleted two years after they start. A shelf nobody opens for 400 days is deleted with its laptops and loans. Deleting a shelf from its manager board removes everything at once. Nightly database backups are kept for two weeks. Backups taken when the site is updated are kept until they are removed by hand.

Cookies and outside services

Pages with a form set one security cookie that protects the form; there are no analytics, advertising or tracking cookies, and no analytics services. The only outside service any page loads is the banner ad from adengine.us described under Advertising; it also counts one page view per page as a daily total. Shelf and counter pages load nothing from other sites. The site sends no email or texts.

Advertising

The home page, pricing, How it works and the hand-back checklist show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services. Shelf and counter pages, the page that opens a shelf, this page and the terms show no ad.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your internet address, your browser type and the address of this site with those requests. It never receives the page's own address.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your internet address is used. adengine.us looks up the approximate city for your address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (internet address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
• Nothing about you is sold or shared.

Payments

Payments are not switched on yet (preview). When they are, PayPal will handle them; Lend Shelf will keep only a random pass key's hash, the plan and its end date.

Questions

To ask about this page or what a shelf keeps, Contact WeldonPC. There are no accounts to look you up by, so name the shelf without sending its manager or counter link.