Privacy note for the free apps

These apps are made and run by SoeSan Holdings LLC, an Indiana company. We decide what is counted and why. EU and UK law calls that the "controller". Email questions to hello@minsoesantun.com. Pennyrow and its bank guides count visits on our server. Pennyrow's privacy page explains the app's count. Our main privacy policy covers the rest of this website and anything you email us.

Short version: almost everything you type stays on your device. We count visits to our pages, with no names and no accounts. A few apps send us one extra thing each, and this note says what. You can switch the visit counting off in most apps.

What you type mostly stays with you

What you type, paste, open from your files or choose in an app is worked out in your browser. Apart from the cases under "Things that do reach us", we do not receive it and we do not keep it.

Many apps save your list, scores or settings in your browser's own storage on your device. A private window erases that when you close it, and Safari may erase it after about a week without a visit. You can also clear it with the app's clear button, where it has one, or with your browser's site-data settings.

If you make a share link or a calendar link, the link contains some of what you entered. The app says which parts. Name Stock uses a name and a year. Shift Year uses a rotation, a crew and a date. Anyone who has the link can read it.

If you use a location button in Totality, Orbit Tonight or Star Map, the app does not send your position to us. A few things can still show where you are:

• Totality puts your position in the page address, rounded to about 1 kilometer if you use the location button (a spot you tap on the map is kept to about 100 meters). If you reload or share that address, our web host receives it. Its map also asks for pictures of your area (see below), and its Directions link sends your spot to Google Maps, to about 1 kilometer after the location button and to about one meter after a map tap.
• Orbit Tonight's + Google Calendar button sends the place name shown on the page to Google Calendar: a city, your latitude to one decimal, or, if you typed coordinates far from any city, both coordinates rounded to about 1 kilometer.
• Star Map uses the nearest city in its list, or your position rounded to about 10 kilometers. It keeps the date, place, name and message in the part of the page address after "#", which your browser does not send to us. If you share that link, for example with its Post on X button, the place, name and message go with it.

Things that do reach us

• Share links and calendar links: when someone opens a share link (for example in Name Stock, Carve Night or Now Showing), or a calendar app asks for a Shift Year or NMIXX calendar, the whole address reaches our server. We use it to build the page, the preview or the calendar. We do not save it. Our web host's records can hold it. We can see those records for about a day. To draw a preview picture, our server also asks Google Fonts for the letters it needs, which can include a name from the link. Our server makes that request, not your browser, so Google does not get your IP address from it.
• Name Stock lookups: to look up a name, your browser asks our web host for a data file named after the first two or three letters of the name. Those letters can appear in the host's records. The full name stays in your browser.
• Now Showing (the trailer maker): when you paste a link, our server reads that page for its title, description and headings, and fetches up to three of its pictures. Opening a shared trailer does this again. We do not save the link or the picture addresses. Our web host may keep a record of them. We can see those records for about a day.
• Lantern: when you let a lantern go, we add one to today's count for your country. We work out the country from your IP address (the number that identifies your internet connection). To limit repeat taps from one network address, our server briefly holds a scrambled form of it in its memory. It is never saved to our database. We keep only counts: a total per country per day and a total per hour. Your wish is never sent.

What we count when you visit

Each time someone opens a page, we add one entry to a visit count. An entry has no name and no visitor ID. It includes:

• the page address, without anything after a question mark (except the post label described below)
• the date and time of the visit
• the website or app that sent you, if any (links between our own sites count too)
• whether you arrived from outside the page's own website: from another website, from an app, or by typing the address
• whether your main way of pointing is touch, as on a phone or tablet
• your browser's time zone (Sub Killer, Orbit Tonight, Totality and Flight Claim leave this out)

We skip a visit if we think it is a bot, if your browser has opted out, or if the same page, time zone and device type were counted in the last 30 seconds.

Some apps also count which buttons and features get used (today Name Stock, Seat Finder, Recall Check, Star Map and the download button in Now Showing). We use a fixed name for each, never anything you typed. On any of our pages, a tap on a link to an Etsy listing or shop page, or to a Fiverr gig page, is counted the same way, by listing number, the word "shop" or gig name only.

A link we post may carry a short label after the question mark, in the form s=label, such as ?s=x-1023. The label is 2 to 32 lowercase letters, numbers and hyphens, and starts with a letter. We count one visit for that label, so we know which post brought a visit. Any link with a label like this is counted, whoever wrote it and wherever s=label sits among the other parts after the question mark. Nothing else after a question mark is sent or kept.

We set no cookies of our own, and there are no accounts and no advertising tools. The counts have no ID or code that follows one person from visit to visit. Supabase's network provider, Cloudflare, can send a short security cookie called __cf_bm when your browser contacts Supabase. Most browsers refuse it, and we never read or use it.

We do not store your IP address in the counts. The counts live in Supabase, one entry per visit, and are kept for about 400 days so we can compare one year with the next. Then they are deleted. We use them to see which apps are used and which features matter. We do not sell them or use them for advertising.

Who else can see your visit

Like any company that runs a website, Vercel (which serves our pages) and Supabase (which stores our counts) can see your IP address and browser details when your browser contacts them. Our counts are stored in Supabase's US East (Ohio) region. Vercel and Supabase run servers around the world, so a server near you may handle your visit.

We can see these records for about a day on our current plans. Vercel and Supabase use them to run and secure their services, and their own systems, including security and billing, may keep copies longer under their own privacy policies. We do not use these records to find out who you are or to build a picture of you. If a plan change lets us see them for longer, we update this note.

Some pages also load their own content from Supabase, such as the build lists on Factory Island, Ship Log and the home and Products pages of minsoesantun.com.

Other companies our pages load things from

These apps load files from a file service called jsDelivr, so jsDelivr can see your IP address: Factory Island, Ship Card, Tier Maker, Carve Night, Lantern, Orbit Tonight, Sub Killer and Totality. The files are 3D, map, PDF, video and astronomy tools.

Totality's map pictures come from OpenFreeMap. Your browser asks it for them directly, so OpenFreeMap sees your IP address and the map area you are looking at. It says its normal logs hold no IP address. Error logs that may hold it are deleted after 7 days, and during an attack it may log IP addresses for up to 30 days. It says it uses no cookies or tracking.

Recall Check gets the USDA's meat and poultry recall list straight from the USDA Food Safety and Inspection Service (fsis.usda.gov), so the USDA can see your IP address. It asks only for the list, never for anything you typed or scanned.

Four apps (Totality, Burmese Day, Myanmar Calendar and Loophole) still get their fonts (letter styles) from Google, so Google can see your IP address.

If you click a link to another site, such as Etsy, X, Google Maps or Google Calendar, that site has its own privacy rules.

Stop the visit counting (your right to object)

Some browsers have a privacy setting called Global Privacy Control. If yours has it turned on, our apps and this website do not count your visit or your button taps. Brave and DuckDuckGo send it by default, and Firefox has a setting for it. It does not depend on site data, so it also works in private windows. It does not apply to Pennyrow or its bank guides, which count visits on our server.

You can also switch counting off for one website by opening it with #fx-notrack at the end of the address. One tap on a link below does it: Name Stock, minsoesantun.com, Totality, Burmese Day and Myanmar Calendar, Kyat Watch, Loophole and all the other apps. Each link saves a small setting in your browser for that website only. You will see no message when it works.

That setting needs your browser to allow site data. It is erased if you clear site data or close a private window, and Safari may erase it after about a week without a visit to that website. If your browser blocks site data, it cannot be saved and your visit is still counted. A page opened inside another app, such as X or TikTok, may not keep it, so open the link in your browser.

Letting a lantern go still adds one to Lantern's daily country total, and Now Showing still reads the page you paste, because you asked for those.

Kids, teens and parents

These apps are made for a general audience. Some, such as the NMIXX fan games and Name Stock, appeal to teens. We do not aim them at children under 13. We do not ask for a name, email address or other personal information. What you type stays in your browser, except the cases under "Things that do reach us".

Our hosts see your IP address whenever a browser asks for a page. The law calls an IP address a persistent identifier. Apart from the Cloudflare cookie above, it is the only one involved. We use it only for internal operations: sending pages, keeping the apps secure and working, and counting visits in total. We do not sell it. We do not use it for advertising, to contact anyone or to profile anyone. We make sure of this in two ways: our own counts have no place to store an IP address, and our pages run no advertising or profiling tools. The other companies named in this note also see it when your browser contacts them. We can see it in our hosts' records for about a day on our current plans.

If you are a parent and think your child has emailed us, write to hello@minsoesantun.com and we will delete the email.

Your rights

Our counts hold no name, no IP address and no visitor ID. Each entry has the time of the visit. For about a day, we can see your IP address for the same visit in our hosts' records. After that, we cannot link an entry to you. If you can give us details that help us find your entry, tell us and we will try. Anything you email us is handled under the main privacy policy.

If you are in the EU or UK, the law may treat your IP address as personal data (information about a person who can be identified). It may treat the count made at that moment the same way. Our reason for counting is called "legitimate interest". We have a fair reason to run and secure the apps and to know which apps and features are used, and the counting takes little from your privacy.

You can object to the counting. Turn on Global Privacy Control, use #fx-notrack as described above, or email hello@minsoesantun.com and we will help you switch it off. This stops the counts. It cannot stop our hosts' routine records, which are needed to deliver the pages.

You can complain to the data protection authority where you live (the government office that handles privacy complaints). EU authorities are listed by the European Data Protection Board. In the UK it is the Information Commissioner's Office.

Changes to this note

The date at the top is when we last updated this note. We aim to update it when we add an app, or when an app changes what it counts or which other companies it loads things from.