Privacy

The planner keeps nothing. A plan is worked out from the address you open (the trip is in the link) and is not saved on this site.

A Galley Book keeps what you save in it: the book's name, your locker names, and each trip's answers, meal swaps, stow moves and extra items. There are no accounts, names or email addresses. The book's link is its key: only a one-way hash of it is stored, so we cannot look up or recover a lost link. A book not opened for 400 days is deleted, with its trips. You can delete a book or a trip at any time with its Delete button.

Server logs. Like any web server, the host records each request (address, time, page) in its logs for a short time, and those log lines include book links. We use them only to keep the site running.

Limits on use. To stop abuse we count requests per network address per day, stored only as a salted hash and deleted after two days.

Cookies. Pages with a form set one security cookie for that form. Nothing tracks you across sites. No tracking or advertising cookies and no analytics services. The only outside script any page loads is the adengine.us banner on the public pages, described under Advertising; it also counts one page view per page as a daily total.

Payments. None are taken yet. When they start, PayPal will handle them; this site will never see card numbers.

Advertising

The home page, the planner form, the meal library, How it works, Pricing and About show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services. A worked plan, Galley Books and their trips, Galley Cards and shopping-list files, this page and the terms show no ad.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address and your browser type with those requests. The requests name this site, never the page you are on, so a plan's answers stay here.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
• Nothing about you is sold or shared.

Last updated 17 October 2026 (the Advertising section was added).