SHTF STOCKPILE

Privacy & your data

Choose guest mode for inventory stored in this browser, or a member account for household and inventory saved on this site’s server. There are no advertising or analytics scripts in the app.

Guest and demo data

Guest inventory is stored in this browser profile on this device. Different devices, browsers and site addresses have separate guest data. Clearing site data or private-browsing sessions can erase it. The clearly labeled front-page examples and interactive demo are not your saved inventory and are never automatically added to an account.

Member accounts and saved inventory

A member account stores your chosen username, a salted scrypt password hash, household settings and inventory in a private server-side SQLite database. The server does not store plaintext passwords. Inventory is available after signing in on another device. HTTPS is required for member use. This is not end-to-end encryption: the site operator and server administrators can access stored inventory. Do not enter passwords, detailed health records or other highly sensitive information into supply notes.

Member session cookies are HttpOnly, Secure and SameSite=Lax and expire after seven days. The server stores hashes of session tokens. Authentication uses temporary rate-limit records keyed to hashed IP addresses and usernames; old rate-limit records are removed after roughly a day. Hosting and Cloudflare infrastructure may keep ordinary access/security logs under their own policies. Account email is optional for existing members. When transactional email is configured, new accounts can confirm an email address and request password recovery. Pending and confirmed email addresses are stored privately. Confirmation and reset tokens are stored only as hashes, are one-use and expire. Resetting a password revokes previous sessions. Email delivery uses Resend when enabled; it receives the recipient address and transactional message. The interface explicitly says when email is not configured.

Browser inventory stays separate

Signing in does not silently upload or overwrite guest inventory. You can explicitly import the browser copy into your account after a replacement confirmation; the guest copy is retained. Account saves use revision checks to avoid silently replacing changes made on another device.

Backups and data control

Export downloads a plain JSON copy of the household and inventory you are currently viewing. Imports are limited to 2 MB and 2,000 entries and require confirmation before replacing inventory. Individual supply deletion and inventory reset require confirmation. Server database backups are private administrative files outside the public webroot. Regular protected backup and restore checks are part of the operating plan; do not rely on this site as your only record. Self-service account deletion is not implemented. Email recovery is available only when configured and only for a previously confirmed email address. Existing members without a confirmed address must keep their password safe.

Coupon and retailer searches

Public DealNews RSS feeds are retrieved by this server from a fixed allowlist, cached outside the public webroot and filtered in your browser. Loading those feeds does not send your inventory, household, account cookie or search keyword to the publisher. Search keywords stay in this browser until you choose an external retailer search. External Walmart, Target, Amazon and Slickdeals searches send only the selected keyword to the chosen website. Source offer pages and any seller links have their own tracking, terms and sign-in requirements. We add no affiliate tags, but preserve publisher referral links. Coupon result thumbnails load lazily from the fixed DealNews image CDN, d.dlnws.com. Image requests omit referrers and cross-site credentials. The publisher CDN receives your IP address, browser/network details and site origin, but not your member session cookie, inventory, household or search keyword. Images are source-supplied, not independently checked product matches; unavailable images have a labeled fallback. Offers and expiration information are source-reported, not independently verified; checkout confirms price and eligibility.

Appearance and optional account messages

The black/white theme preference is stored separately in this browser; without a saved choice the theme follows the system preference. Changing the theme does not change inventory.

No marketing alerts or purchases

There are no marketing emails, push notifications or automatic purchases. Optional account confirmation and password-recovery messages are transactional and only available when configured. Date reminders appear while using the app. External guidance and support links take you to independent sites.