What the Starter Kit workbook does with your answers

Your business answers stay on your device. Your licence stamp and update token are separate.

Last updated 13 October 2026

The short version

• Answers stay local. The 30-Day Business Continuity Starter Kit keeps them in your browser and files you save, never on our servers. No account or login.
• Copies show the buyer’s name and email. Your Stripe details appear on owner and review copies, including protected files.
• Owner copies carry an update token. Only an update you request sends it to us, never your answers. Review copies have no token.
• Storage is plaintext unless you protect it. Optional encryption has no passphrase reset or recovery. Limited analytics contains no answer text.

This policy covers the downloaded workbook. The sales page and the rest of the website use no local or session storage and have their own policy.

What your browser stores

The workbook keeps one local-storage entry for its file: answers and progress, including your last day and dismissed notices. It persists after you close the tab.

• Plaintext by default. Anyone using this browser profile can read it. Protect or erase it on shared or borrowed devices.
• Optional encryption. Set a passphrase on Your answers. AES-GCM encrypts the entry with a passphrase-derived key; each opening asks for the passphrase. It is never stored or sent. Nobody can reset it: lose it and the encrypted answers are unreadable.
• Erase your answers removes this browser’s copy, not saved files.
• Clearing browser data removes the stored entry. Without a saved copy, your answers are gone.

The workbook sets no cookies and uses no session storage.

The file you save

Save a copy downloads one HTML file containing your answers, composed sheet, response plan, and gap list. It is built in your browser, never uploaded. We have no copy and cannot retrieve or delete it.

• Owner copies retain your licence stamp and token. The name and email from Stripe appear on Sources and in the footer. The signed token includes those details as lic, the purchased major version as maj, a purchase reference, issue time, and token-format version. It contains no card details or answers.
• Review copies retain your name and email but remove the token. Marked “Review Copy”, they can be read, edited, and saved, but cannot update. A link offers recipients their own copy. Sending one shares your licence stamp.
• Saved answers are readable unless protected. Tick the passphrase option to encrypt them using the same primitives as browser storage. A protected file contains no readable answer text, including the composed sheet. Its stamp and token are not encrypted.
• Keep and share it carefully. It may contain successor contact details, credential locations, and financial arrangements. Check who can access the file, including in shared cloud folders.

We can replace a lost workbook only with an empty one. The order email has a download link; support can email another to your checkout address after checking Stripe for a completed order. Links expire after 24 hours. Each download has your stamp and a fresh token, never lost answers. The site policy covers those emails and the recovery form.

What the workbook sends

On opening with a connection, it makes a GET for notice.json on this site: current version and cohort notice. No answers, identifiers, or query parameters are attached. Saved copies make the same request.

Only when you request an update does it POST the signed token to this origin. We read its buyer details to stamp the replacement and its major-version claim to check entitlement, build the file, and retain neither. The request includes no answers or other typed content. Protecting answers does not encrypt the token.

If offline, blocked, or either request fails, the workbook keeps working. The notice is silently skipped; an update reports failure without losing your work.

Analytics

Umami counts visits without cookies and reports limited workbook events: day and area, completed-day and twelve-check counts, whether a save was protected, import success or failure, version/build and notice identifiers, and clicked links. These are not the signed update token.

• No answer text is sent: no name, phone number, client, system, or note.
• Typed content never appears in a URL or page title, so it cannot leak through a referrer or an address-bar screenshot.
• Counts are aggregate, not tied to a name, email, or account, and cannot identify one person.

A content blocker can stop the counter loading. The workbook behaves identically without it.

What the workbook never does

• It has no email field or subscription control. Apart from analytics, notice.json and the requested token POST are its only service requests.
• It never sends, backs up, or syncs answers to any server.
• Umami is its only third-party script. Fonts and images come only from this domain or are embedded in the downloaded file.
• It reads nothing else in your browser and cannot access other sites you have open.

How you reached it

The workbook has no public document URL. It arrives as a purchased file or a shared copy and opens without activation or credentials, unless its answers are passphrase-protected. An unprotected copy shows its existing answers; no server copy exists to access. The sales page, not the workbook file, is indexed.

Questions, or a request

We cannot export, correct, or delete your local answers. For policy or workbook questions, write to support@plan-ahead.now, or start with the support page.

Support email is held in a Zoho mailbox, separate from the workbook. A mailto: link opens your mail program; the file itself sends nothing. Do not include your answers; support never needs them.

Changes

If answer handling changes, this policy and its date change with the workbook.