Privacy policy
Draft, pending legal review. This privacy policy states our actual positions and practices, but it has not yet been reviewed by a qualified adviser. The few highlighted values below are decisions that review has to settle — chiefly the governing law, the liability wording and the content licence. Everything else on this page is final and accurate.
oncall.fyi is designed to work with as little personal data as practical. Most assessment and planning inputs stay in your browser by default. This notice explains what we process when you browse the site, use a tool, create a share link, save a workspace, send article feedback, or contact us.
Controller
The controller is monoduty OÜ, registered in Tallinn, Estonia, registration number 17418117. Contact: [email protected]. Registered address: Sepapaja tn 6, 15551 Tallinn, Harju maakond, Estonia.
What we process
Tool inputs
Readiness answers, aggregate alert-quality numbers, policy labels, and other tool inputs are processed in your browser by default. They are not intended for production secrets, alert payloads, customer data, credentials, or personal employee records.
Assessments, CSV analysis, the provider worksheet, pager-test plans and template editing process inputs locally. CSV files are not uploaded. Saving to the workspace stores service labels, team or owner roles, time zones, report snapshots, action evidence and documents in this browser’s local storage. Clearing site data or using a different browser does not preserve this work; use the explicit JSON backup and import controls when needed. Emailed reports are not available.
Website and security data
Our hosting and security providers may process limited technical data such as IP address, request time, user agent, requested URL, response status, and abuse or security signals. We use this information to deliver and protect the service, investigate failures, and prevent misuse. Self-hosted on the operator's own server, behind Cloudflare and nginx.
Product analytics
We measure public page paths and fixed actions such as completing a tool, copying an example, downloading a report or saving a document. Analytics receives no answers, scores, CSV contents, service labels, trial evidence, names or prices you enter. Search parameters and URL fragments are excluded; referrers are reduced to their origin. Umami, self-hosted by the operator. Cookieless: it sets nothing on your device. We respect browser Do Not Track and Global Privacy Control signals. The legal-basis review below remains open.
Emailed reports
When a feature to email a report exists, we will process your email address, the report content you chose to send, delivery status, and a limited audit record. Requesting a report will not automatically subscribe you to anything. This feature is not currently available.
Share links
A share link carries the result in the part of the URL after the#symbol. Browsers omit that fragment from HTTP requests, and our analytics excludes it. The link may still be stored in your browser history or by anyone you share it with. There is no server-side copy to expire or revoke. Anyone holding the link can read the result; clearing your local workspace does not revoke links or exported files.
Article feedback
If you use a guide’s feedback buttons, we store only its page path, your chosen outcome, a random record ID and a timestamp for 30 days. We do not collect free-text incident details, names or email addresses through this feature. Feedback is visible only in our authenticated maintenance dashboard. Infrastructure security logs are separate from feedback records. You can choose not to submit feedback.
Newsletter
If you join The On-Call Brief, we process your email address, consent and confirmation timestamps, subscription status, source or referral, and delivery or engagement information made available by our provider. We use double opt-in. You can unsubscribe at any time. No email provider has been selected yet, so sign-ups are not being accepted and no address is stored: [newsletter provider — pending].
Contact and corrections
If you contact us, suggest a topic, or report a correction, we process the details you provide and the conversation needed to respond.
Why we process data
Each activity must be mapped to an actual legal basis before this policy is final. The expected categories are: service delivery or steps requested by you; legitimate interests in security, reliability, fraud prevention and limited service analytics, subject to balancing; consent for optional marketing or non-essential analytics where required; legal obligations; and the establishment, exercise or defence of legal claims where applicable. The final mapping is subject to qualified review: [legal basis review — pending].
No processing purpose is added merely because a provider makes data available.
Data minimisation
Please do not enter secrets, customer data, incident payloads, health information, precise employee performance records, or other sensitive material into oncall.fyi tools. Use initials, roles, or aggregate numbers where possible.
Search matching runs in your browser. Opening or sharing a search URL containing a query can still put that query in browser history and the hosting layer’s HTTP logs. Analytics excludes search queries.
Retention
| Data | Planning rule | Status |
|---|---|---|
| Tool drafts and workspace | Until you delete them or clear browser storage | Local only. Delete individual services/documents or the workspace; export JSON first if needed. |
| Security logs | Short, justified period | Held by the hosting and edge layer |
| Optional analytics | Aggregated, cookieless, no device identifier | Umami, self-hosted |
| Emailed report content | Only as needed to deliver | Feature not available |
| Share links and downloaded files | Controlled by holders of each copy | No server copy or revocation mechanism |
| Article feedback | 30 days; daily expiry cleanup | Fixed choices; private maintenance dashboard |
| Newsletter profile | Until unsubscribe, plus suppression proof | Not accepting sign-ups yet |
| Support and correction email | As needed to respond | [email protected] |
| Consent and audit proof | As required to demonstrate consent | Pending legal review |
Processors and international transfers
The final policy lists every material provider by category — hosting and CDN, database or object storage, transactional email, newsletter, analytics, error and security monitoring, support forms, and payment if paid services launch — with purpose, data categories, location, transfer mechanism where relevant, and a link to the provider’s privacy information. A provider that is not in the data map is not silently added.
Today that list is short, because the site does little on a server: hosting and edge protection (self-hosted on the operator's own server, behind cloudflare and nginx), and umami, self-hosted by the operator. cookieless: it sets nothing on your device. Categorical article feedback is stored on the same hosting server and expires after 30 days. No external workspace storage or newsletter provider is configured.
Your choices and rights
Depending on the applicable law and circumstances, you may have rights to obtain information, access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, and complain to a supervisory authority. Withdrawing consent does not affect processing that occurred before withdrawal.
To make a request, contact [email protected]. We may need to verify the request without collecting more information than necessary.
Cookies and analytics
We use essential storage required for features you request and, where enabled, privacy-limited analytics to understand whether guides and tools are useful. We do not use raw tool answers for advertising.
Strictly necessary
- Your theme preference
- Local tool progress, so a refresh does not lose your work
- Security state where required
- Your consent choice, if optional analytics are ever enabled
These are stored in your browser only. They are never sent to us and are never used for advertising.
Optional analytics
Self-hosted Umami records public page paths and fixed outcome events as described above. It does not receive private tool inputs, search queries or shared-result fragments. You can use Do Not Track or Global Privacy Control in your browser to disable these requests. No advertising or cross-site profile is created by this site.
No advertising profile
No cross-site behavioural advertising, and no sale of subscriber or tool data.
Automated decisions
Tool scores are planning heuristics. They do not make legal, employment, safety, credit, insurance, or similarly significant decisions about a person. Teams should not use a score as an employee-performance rating.
Children
oncall.fyi is intended for professional and adult users and is not directed to children. We do not knowingly design the service to collect children’s personal data.
Security
We use proportionate technical and organisational measures, but no online service can guarantee absolute security. Do not submit sensitive production or personal information that a tool does not require.
Changes
We may update this notice as the service changes. The page will show the effective date and a summary of material changes. Effective date: 3 September 2026.