Privacy Policy
This page describes what this site stores, where it stores it, and how long it keeps it. We have written it specifically rather than generically, because a vague privacy policy on a site about safeguarding requirements would be a poor advertisement for the advice.
Forms
When you submit a form, the fields you filled in are stored in our own PostgreSQL database on our own server and are also delivered by email to [email protected]. That means the enquiry survives an email delivery failure rather than disappearing, which is the reason the database write happens first.
Alongside the fields you completed we store the page you submitted from, the time, and a salted SHA-256 hash of your IP address. The hash exists only to rate-limit repeat submissions; we do not keep the address itself, and the hash cannot be reversed to recover it without the salt, which is not stored with the data. If no salt is configured, no IP value is recorded at all.
Email delivery is handled by Mailgun, which processes the message on our behalf. We keep a delivery log — recipient, subject, whether the send succeeded — for 90 days.
Please do not send CUI, FCI, or export-controlled information through any form on this site. It is not an approved channel for controlled data. If your enquiry requires it, we will arrange a secure channel first. See marking CUI if you are unsure whether what you hold qualifies.
The SPRS calculator
The calculator runs in your browser and sends nothing while you are using it. Your answers are transmitted to us only if you press Save and get a resume link, which stores the score and your per-requirement answers so that the link can restore them later. No email address is required to save, and supplying one is optional.
A saved assessment is identified by an unguessable token in the URL. Anyone who has that link can view and edit that assessment, so treat it as you would a shared document link. Saved assessments are deleted automatically after 1 year.
Nothing in the calculator is submitted to DoD, to SPRS, or to any third party. Posting a score to SPRS is something only you can do.
Analytics
We use Google Analytics 4 via Google Tag Manager to understand which pages are useful. This records page paths, approximate location, device type, and a small set of interaction events.
We deliberately do not send raw SPRS scores, company names, contract identifiers or form contents to analytics. Where the calculator reports usage at all, it sends a coarse band — negative, 0–50, 51–89, or 90–110 — and never the figure itself.
Cookies
Analytics cookies are set by Google Analytics. The site itself sets no advertising or tracking cookies of its own, and nothing on this site requires a cookie to function.
How long we keep things
- Form enquiries: 2 years from submission.
- Saved calculator assessments: 1 year from last update.
- Email delivery logs: 90 days.
These are enforced by a scheduled purge that deletes rows past their date, not by anyone remembering to do it.
Your data
To ask what we hold about you, to have an enquiry deleted, or to have a saved assessment removed, email [email protected]. If you are asking about a saved assessment, include the resume link so we can identify it.