Privacy

Who we are

WebAppsToolBox is a small, independent maker of tools for divers and their kit, run by one person in Australia. We aim to meet the Australian Privacy Principles. Questions, requests and complaints go to webappstoolbox@icloud.com, read by a human.

What we collect

Browsing this site

Nothing. No cookies, no analytics, and our web server keeps no record of ordinary page visits.

Apps used without an account

Each says so on its own privacy page — for example the Poseidon Se7en Error Checker, which works entirely in your browser, and while it is new logs each request for 30 days: your internet address, the time and the page, never what you looked up.

When you sign in

From Google or Microsoft: your name, your email address, whether they have verified it, and the identifier they use for your account with them. We never see or store a password.

Your sessions

For each device you sign in on: a device label, your browser’s description of itself, the internet address you signed in from, and when you were last active — so you can see where you are signed in, and sign out remotely.

Your activity record

Sign-ins, sign-outs, linking a sign-in method, and deleting your account, each with the time and internet address. It exists to protect your account and to answer “was that me?”.

What you put in

Whatever you record in an app — in the Se7en Error Checker, your units (model, serial number, firmware) and what happened to them, including any notes you add. It is yours.

On your device

Only to log without signal. The Se7en Error Checker keeps, in your browser, a copy of your units and of any entries waiting to be sent. The copy is removed the next time you open the app while signed out, and when you delete your account; an entry waiting to be sent stays until it is sent or you discard it.

Cookies

Only to keep you signed in, only once you sign in, and never for tracking. All three are restricted to this site and unreadable by scripts.

watb_at

Proves you are signed in. Lasts 15 minutes and is renewed while you use the site.

watb_rt

Renews the one above, so you stay signed in. Lasts up to 60 days, and ends the moment you sign out.

watb_oidc_flow

Exists only during sign-in, for at most 10 minutes, to make sure the reply from Google or Microsoft really answers your request.

How we use it

To run your account and the apps, to keep them secure, and to fix them when something goes wrong. Nothing else — no profiling, no marketing, no advertising, and we never sell or share it.

Who else is involved

Google, Microsoft

When you sign in with one of them, they know you signed in to us. Their own privacy policies apply on their side.

Our servers

Our own, in Australia — not a cloud provider. Nobody else hosts or processes your data.

Email

If you email us, your message is held by our email provider (Apple iCloud) and used only to reply.

How long we keep it

Your account and what you put in

For as long as you keep your account.

Service history you chose to leave

If you agreed when you deleted your account (below), for as long as the app runs, no longer linked to your account.

Things you delete in an app

Hidden from you everywhere, and kept with your account — your data download shows them as logically deleted. They go when your account does.

Ended sessions

Removed 30 days after they expire.

Server logs

Requests to the sign-in pages, your account page, our app interface and the Se7en Error Checker are logged with your internet address, the time and the address requested — never what you sent — and kept for 30 days, to fix faults and stop abuse. When something goes wrong, the error is logged the same way; the web server’s own error log is replaced as it fills, usually within about three months.

Your activity record

24 months, then removed — the same as our backups.

Your data, your control

• See it — Download my data on your account page gives you everything we hold about you, as a file.
• Correct it — your name on your account page; what you recorded, in the app.
• Delete it — any entry in the app, or your whole account (below).
• Ask — anything not covered here, at the address above.

When you delete your account

We remove your account, and everything in it, from our live systems straight away, and sign you out everywhere.

We keep one copy of what we held — the same file Download my data gives you, including anything you chose to leave with an app — stored offline with access restricted, for 7 years, and then destroy it. We keep it in case of a dispute or legal claim, which for life-support equipment, servicing and compressors can arise years later, and we use it for nothing else.

Our database backups are encrypted, and still contain your data until they are overwritten — within 24 months.

If you agree when you delete, an app may keep a unit’s record so that it outlives your account — in the Se7en Error Checker, each rebreather’s service and fault history, kept with its model, serial number and your notes, renamed to its model and serial, and no longer linked to your account. Notes can contain personal details, so read the question before you delete: the box starts ticked, and unticking it means everything goes with the rest of your account. You are asked the same question, the same way, whether you delete from your account page here or from inside the app.

You are welcome to sign up again afterwards. It will be a new account, with nothing carried over.

Security

Every connection is encrypted. We hold no passwords — sign-in is always through Google or Microsoft. Backups are encrypted to a key that is not kept on the server. And we keep as little as we can, because data we do not hold cannot leak.

Changes, and complaints

If this page changes, the new version is published here, with its date, before it takes effect. If you are unhappy with how we have handled your data, tell us first; if we do not put it right, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Updated 6 October 2026.