Privacy policy

Last updated September 2026.

This page describes the current Book Box Placement Engine. The site does not require an account and does not accept uploaded files.

Planning data

The app stores public county datasets in your browser to avoid repeated downloads. Scenario settings may appear in the page URL. The optimizer processes the supplied demand and candidate data; this implementation does not save your plans in a database. Reports are downloaded to your device.

Maps and public data services

Your browser requests map tiles from OpenStreetMap and data from Census TIGERweb, Census Reporter, and OpenStreetMap Overpass mirrors. Those services can receive your IP address and request details. Requests for candidate sites and Census youth counts normally go through this site's server, which asks Overpass and Census Reporter on the planner's behalf and keeps a copy of the public results for each county for up to 30 days. That copy contains only public data, not information about you. Opening a directions link sends the selected destination coordinates to Google Maps. The site does not request your device location.

Inquiries

When online inquiries are enabled, the form collects your name, email address, and message to respond to your request. A honeypot and Cloudflare Turnstile help limit automated submissions. Turnstile processes technical browser and network signals. Validated messages are sent over HTTPS to the operator's configured inquiry service. Do not submit sensitive information.

No retention period has been published for the receiving service. Contact the operator through the published contact address to request information about access, correction, or deletion.

County suggestion

When you open the planner without a county in the link, the site's server reads the approximate location that its host, Netlify, derives from your IP address (usually your city) and returns it to your browser. Your browser then asks Census TIGERweb which county contains that point and offers a button to plan it. The location is not stored, and nothing changes unless you click the button. The site does not use your device's GPS location.

Visitor counts

The site counts visitors without cookies and without storing anything in your browser. When a page loads, the site's server combines your IP address and browser user agent with a random value that changes every week, and keeps only a one-way hash of that combination. Your IP address is not stored.

With that hash, the site records the page you first opened, the website or campaign tag that sent you (for example reddit.com, never the full address), which kinds of planner actions you took (such as choosing a county or exporting a report, not the settings you chose), and whether a county's data loaded or failed, including the county code for failures.

Loading a county's Census data through this site's server also counts as a county plan for that visitor, using the same hashed method, so a visit is still counted if the page's own counting request is blocked. It is never counted twice.

Each week's random value is deleted when the next week begins, so records from past weeks cannot be linked to a visitor. Records are deleted after 13 weeks. If your browser sends a Global Privacy Control signal, nothing is counted.

Link previews and search engines

When someone pastes a link to this site into an app such as Slack, iMessage, Discord, or LinkedIn, that app's server requests the page to build a preview. Search engines request pages the same way. The site counts these requests by app, page, county in the link, and campaign tag. The requests come from the app or search engine, not from the person sharing, and nothing about that person is recorded. Counts are deleted after 13 weeks.

Optional Google Analytics

Analytics is inactive unless the operator configures a Google Analytics property and you choose to allow it. Global Privacy Control disables this integration. If enabled, analytics uses first-party cookies and records page visits. The integration omits inquiry contents, scenario query strings, and referrer values, and disables advertising personalization and Google signals.

You can change your choice using Analytics preferences in the footer. Essential browser storage for public data caching is separate from optional analytics.

Hosting and security

The hosting provider may process access and security logs, including IP addresses. Server-side rate limits and request validation help protect the service. This site has no password store, session login, or private user-record database.

Updates

This policy will need to be updated when the operator adds a contact address, defines inquiry retention, or changes connected services.