Privacy Policy

Effective October 15, 2026.

CompenStation's public site is a demo with fictional data. It is designed to collect as little about you as possible.

What we store

• A login cookie. When you log in, we set one cookie that keeps you signed in. It holds a random code (not your password) and can't be read by scripts on the page. It expires after 8 hours or when you log out. We use no tracking, analytics or advertising cookies.
• Anything you type into the demo. Names, notes and other entries are stored in our database until the next automatic reset, at most a few hours later. Please don't enter real information.
• Basic request logs. Our logs record the time, page path, response status and duration of each request. They don't record IP addresses, form contents or passwords.
• Your IP address, briefly. It is used in memory to limit login attempts and protect the Service from abuse, and is forgotten within 15 minutes.

How passwords are protected

Passwords are never stored as written. They are stored only as salted scrypt hashes, which can't be turned back into the password.

Third parties

The Service runs on a hosting provider and a database provider, which may keep their own technical logs under their own privacy policies. We do not sell or share data with anyone else.

Children

The Service is not directed at children under 13.

Changes and contact

If this policy changes, the effective date above will be updated. Questions: open an issue on the GitHub repository.