Privacy policy
Draft, pending legal review. This privacy policy states our actual positions and practices, but it has not yet been reviewed by a qualified adviser. The few highlighted values below are decisions that review has to settle — chiefly the governing law, the liability wording and the content licence. Everything else on this page is final and accurate.
oncall.fyi is designed to work with as little personal data as practical. Most assessment and planning inputs stay in your browser by default. This notice explains what we process when you browse the site, use a tool, request an emailed report, create a share link, join The On-Call Brief, or contact us.
Controller
The controller is monoduty OÜ, registered in Tallinn, Estonia, registration number 17418117. Contact: [email protected]. The full registered street address is added here once confirmed: [registered street address — pending].
What we process
Tool inputs
Readiness answers, aggregate alert-quality numbers, policy labels, and other tool inputs are processed in your browser by default. They are not intended for production secrets, alert payloads, customer data, credentials, or personal employee records.
We receive tool content only when a feature clearly tells you that data will be sent. No such feature is enabled: the three tools have no server component at all. Sharing a result puts the data in the link itself (see below), not on a server, and emailed reports are not available.
Website and security data
Our hosting and security providers may process limited technical data such as IP address, request time, user agent, requested URL, response status, and abuse or security signals. We use this information to deliver and protect the service, investigate failures, and prevent misuse. Self-hosted on the operator's own server, behind Cloudflare and nginx.
Product analytics
We may measure privacy-limited events such as which guide or tool was used, whether a flow was completed, the general result band, device category, and referral campaign. We do not send raw tool answers, salary values, responder names, alert payloads, or private schedule content to analytics. Umami, self-hosted by the operator. Cookieless: it sets nothing on your device. Because it sets no cookie and stores no identifier on your device, no consent banner is needed — and there is nothing for you to opt out of storing.
Emailed reports
When a feature to email a report exists, we will process your email address, the report content you chose to send, delivery status, and a limited audit record. Requesting a report will not automatically subscribe you to anything. This feature is not currently available.
Share links
A share link carries the result in the part of the URL after the#symbol. Browsers never send that part to a server, so we do not receive it, it never appears in a log, and it is never indexed. Nothing is stored, which also means there is nothing to expire or delete — and no way to revoke a link once you have sent it. Anyone holding the link can read the result, so do not put anything confidential into a tool before sharing one.
Newsletter
If you join The On-Call Brief, we process your email address, consent and confirmation timestamps, subscription status, source or referral, and delivery or engagement information made available by our provider. We use double opt-in. You can unsubscribe at any time. No email provider has been selected yet, so sign-ups are not being accepted and no address is stored: [newsletter provider — pending].
Contact and corrections
If you contact us, suggest a topic, or report a correction, we process the details you provide and the conversation needed to respond.
Why we process data
Each activity must be mapped to an actual legal basis before this policy is final. The expected categories are: service delivery or steps requested by you; legitimate interests in security, reliability, fraud prevention and limited service analytics, subject to balancing; consent for optional marketing or non-essential analytics where required; legal obligations; and the establishment, exercise or defence of legal claims where applicable. The final mapping is subject to qualified review: [legal basis review — pending].
No processing purpose is added merely because a provider makes data available.
Data minimisation
Please do not enter secrets, customer data, incident payloads, health information, precise employee performance records, or other sensitive material into oncall.fyi tools. Use initials, roles, or aggregate numbers where possible.
Retention
| Data | Planning rule | Status |
|---|---|---|
| Browser-local tool state | Controlled by your browser | Live. Clear it from the tool at any time. |
| Security logs | Short, justified period | Held by the hosting and edge layer |
| Optional analytics | Aggregated, cookieless, no device identifier | Umami, self-hosted |
| Emailed report content | Only as needed to deliver | Feature not available |
| Share state | Expiry by default | Feature not available |
| Newsletter profile | Until unsubscribe, plus suppression proof | Not accepting sign-ups yet |
| Support and correction email | As needed to respond | [email protected] |
| Consent and audit proof | As required to demonstrate consent | Pending legal review |
Processors and international transfers
The final policy lists every material provider by category — hosting and CDN, database or object storage, transactional email, newsletter, analytics, error and security monitoring, support forms, and payment if paid services launch — with purpose, data categories, location, transfer mechanism where relevant, and a link to the provider’s privacy information. A provider that is not in the data map is not silently added.
Today that list is short, because the site does little on a server: hosting and edge protection (self-hosted on the operator's own server, behind cloudflare and nginx), and umami, self-hosted by the operator. cookieless: it sets nothing on your device. No email provider, no database and no storage provider is in use.
Your choices and rights
Depending on the applicable law and circumstances, you may have rights to obtain information, access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, and complain to a supervisory authority. Withdrawing consent does not affect processing that occurred before withdrawal.
To make a request, contact [email protected]. We may need to verify the request without collecting more information than necessary.
Cookies and analytics
We use essential storage required for features you request and, where enabled, privacy-limited analytics to understand whether guides and tools are useful. We do not use raw tool answers for advertising.
Strictly necessary
- Your theme preference
- Local tool progress, so a refresh does not lose your work
- Security state where required
- Your consent choice, if optional analytics are ever enabled
These are stored in your browser only. They are never sent to us and are never used for advertising.
Optional analytics
Not enabled at present. If they are enabled, they will be limited to page and tool events, general referrer or campaign, and coarse device or region information — never tool answers, salary values, alert payloads or responder names. Where consent is legally required we will ask for it, declining will be exactly as easy as accepting, and the choice will remain changeable from this page.
No advertising profile
No cross-site behavioural advertising, and no sale of subscriber or tool data.
Automated decisions
Tool scores are planning heuristics. They do not make legal, employment, safety, credit, insurance, or similarly significant decisions about a person. Teams should not use a score as an employee-performance rating.
Children
oncall.fyi is intended for professional and adult users and is not directed to children. We do not knowingly design the service to collect children’s personal data.
Security
We use proportionate technical and organisational measures, but no online service can guarantee absolute security. Do not submit sensitive production or personal information that a tool does not require.
Changes
We may update this notice as the service changes. The page will show the effective date and a summary of material changes. Effective date: 3 September 2026.