Privacy Policy

1. Who is responsible

E-Vory is a free, open-source tool published by an individual developer (@frianasoa on GitHub). It is not a company, and it is not affiliated with any institution, university or employer.

Because E-Vory processes your files only on your own device, you remain the controller of any personal data you put into it. The paragraphs below explain exactly what happens to it.

2. What data E-Vory handles

The files you load can contain personal data about other people. Typically:

• Names of panel members and presenters, as written in your timetable
• Presentation titles, times and room numbers
• The hours each person said they can attend
• Free-text comments and requests from your availability form
• Any other column that happens to be in the same spreadsheet

E-Vory reads these to build the programme and the report. It does not transmit them, index them, profile anyone, or keep them anywhere except on the device you are using.

3. Where processing happens

Everything happens in your browser. Opening E-Vory downloads a static page, a stylesheet, some JavaScript and the solver (a WebAssembly file) from the web host. From then on:

• Spreadsheets are parsed in the page.
• The optimisation is solved in a background thread in the page.
• The report and log are generated in the page.
• Downloads of the report, the log and the timetable workbook are produced by your browser from data already on your device.

There is no application server, no database and no processing queue behind E-Vory. E-Vory works offline once the page has loaded, which you can verify by disconnecting and running an optimisation.

4. What is stored on your device

So that a reload or an accidentally closed tab does not lose your work, E-Vory saves some things in your browser's own storage for this site. Nothing here is transmitted anywhere.

Local storage (keys beginning evory:)

• The last programme and availability files you loaded, so they are still there when you come back
• Which spreadsheet column plays which role, including choices you corrected by hand
• Your settings: preferences per person, penalty weights, the time limit and the suggested-times settings
• Which collapsible panels you left open

IndexedDB (a database named evory)

• The last 10 results for the files you loaded — the report, the log and the proposed timetable workbook, so you can reopen an earlier run and still download it. These contain the names from your programme.

Clearing it

• Forget files and results saved on this device, at the bottom of the app's left column, removes the saved programme, the saved availability, the column choices and every saved result.
• Reset settings to defaults, under Settings, clears the preferences and weights you entered.
• Clearing site data for this site in your browser's settings removes everything above at once. So does using a private window, which keeps nothing after you close it.

5. The one optional network request

Instead of uploading a file, you may paste a Google Sheets link to load availability responses. If you do:

• Your browser requests the sheet directly from Google. Nothing passes through E-Vory.
• The request is made without credentials, so it only works for a sheet shared as “Anyone with the link can view”. E-Vory cannot read a private sheet, and does not ask you for a Google account.
• Google decides what it logs about that request, under Google's Privacy Policy. E-Vory is not affiliated with Google.
• If the responses should not be publicly readable, download the sheet and load the file instead. That involves no network request at all.

Apart from this, E-Vory makes no requests to any third party. It loads no fonts, scripts, trackers or images from external services; everything it needs is served from its own address.

6. What E-Vory does not do

E-Vory does not:

• Upload, copy or retain your programme, availability, results or reports
• Use cookies, or any tracking, advertising or fingerprinting technology
• Collect analytics, telemetry, usage statistics or crash reports
• Ask you to create an account, or ask for your email address
• Show adverts, or sell, share or trade data with anyone
• Use your data to train any model

7. Web hosting logs

E-Vory is served as a static site by a hosting provider (currently Cloudflare Pages). Like any web server, that provider may record ordinary request information — such as IP address, time, the file requested and your browser's user-agent string — for delivery, security and abuse prevention. This is handled by the provider under its own policies, and it is limited to the act of fetching the page.

Your programme data is never part of those logs, because your files are never sent to the server. The only thing the host sees is that someone downloaded the page.

8. Personal data about other people

A programme almost always contains other people's names, and an availability form often contains their comments. When you use E-Vory for this, you are handling their personal data under your own institution's rules and under the law that applies to you (for example the GDPR in the EU).

E-Vory is designed to make that easier rather than harder:

• The data never leaves your device, so there is no transfer to a third party to justify.
• There is no central store, so a deletion request is satisfied by clearing your own browser storage.
• There are no sub-processors to disclose for the core function of the tool.

Please still collect only what you need, keep results no longer than useful, and remember that a downloaded report is an ordinary file containing names — treat it like any other document with personal data in it.

9. Children

E-Vory is a scheduling tool for people organising events, not a service aimed at children, and it does not knowingly collect personal data from anyone. A programme may of course list young participants; that data stays on the organiser's device like any other.

10. Security

Because there is no central store, there is no central breach to suffer: nobody can compromise a server and obtain your programmes, since no server ever holds one. The realistic risks are local ones — someone with access to your computer, browser profile or downloaded files — and section 4 explains how to clear them.

The site is served over HTTPS with a strict set of security headers, and the code is public, so you can audit every claim on this page yourself. If you believe you have found a security or privacy problem, please report it at github.com/frianasoa/evory/issues.

11. Changes to this policy

If E-Vory gains a feature that changes how data is handled, this page will be updated and the date at the top changed with it. The history of every change is visible in the project's public repository. The commitment that your files are not uploaded is a design principle, not a setting — it will not be quietly reversed.

12. Contact

Questions about this policy, or about how E-Vory handles anything, are welcome as an issue on GitHub.