Privacy policy
Last updated:
CIC Maker is run by Jakub Rimek, a freelance developer in Fife, Scotland. This page explains what happens to information when you use cicmaker.co.uk. The short version: the tool has no server behind it, so there is nothing for anyone to collect.
The cards you build
Everything you type, paste or photograph — equipment names, cleaning steps, chemicals, images, sign-off names — is handled entirely by your own browser. None of it is sent to us, and none of it is sent anywhere else. There is no upload, no sync and no account.
Your work is stored in one of two places, and you choose which on the first screen:
- A folder you connect. The browser asks your permission before CIC Maker can see it, and it can only read and write inside the folder you picked — nothing else on your computer. You can withdraw that permission at any time in your browser's site settings, or by moving the folder.
- Your browser only. Cards and images are kept in this browser's own storage (IndexedDB and local storage) on this device. Clearing the site's data removes them.
Exported cards
Exporting writes one HTML file you can email, print or hand to an auditor. Two things are worth knowing about that file.
It carries a hidden machine-readable copy of the card inside it, which is what lets you import it back later. That copy holds the same document you can see — including the prepared-by and authorised-by names, positions and dates, exactly as they are printed on the face of the card, because naming who wrote and approved a controlled document is what the document is for.
By default it does not carry anything you hid. A section you switch off with the eye control is left out of the exported file completely — not on the page and not in the hidden copy — and it stays only in the card saved in your folder or your browser. That is what the plain Export and Download buttons do, and it is what you get unless you choose otherwise. The trade is that importing such a file back will not return those sections; the exported file is the published document, not a backup of your working copy.
There is a second, separately labelled button — Export with hidden sections — which appears only when a card has a hidden section. It exists so a card can be handed to a colleague who should see the hidden parts, and it puts those sections inside the file. They are still not on the printed page, so a file made this way holds text a reader will not see unless they open it in CIC Maker. It is never the default, it has to be chosen for that one export, and it should not be used for a copy going to a customer or an auditor. The export line in the card’s own log records that this button was used and how many hidden sections the file carried.
An exported card should still be handled like any other controlled document: it names people, and where it goes is governed by your own organisation's rules, exactly as a laminated copy on the machine is.
Signing in
The "who's signing in" screen is not an account. It records a name and job title against each change so the card's history is a real audit trail. That name is stored with your cards — in your folder or in your browser — and is never transmitted to us.
Cookies and tracking
There are none. No cookies are set. There is no analytics, no tracking pixel, no advertising network, no session recording and no third-party script or font. Nothing on the page reports back on what you do with it.
Hosting
The site is a set of static files hosted by Netlify. Like any web host, Netlify's servers record standard request logs — IP address, browser type, which file was requested — when your browser asks for a file. See Netlify's privacy policy.
After the page has loaded, CIC Maker does make further requests, and they all go to cicmaker.co.uk itself: the icon pictures as you open a picker or build a card, the starter template lists, and the printing library the first time you use Print or Export. There is no third party in any of them. Those requests appear in Netlify's ordinary logs the same way the first one does, so the honest description of what the host can see is not "one page load" but the files your session asked for, with times against them. Nothing you type, photograph or build is ever part of a request. Your cards never go over the network at all.
Once those files are in your browser's cache, the tool keeps working with your connection switched off.
Libraries
The libraries CIC Maker uses ship with the site. QR generation and ZIP writing are inside the page itself; the print-pagination library is a file on cicmaker.co.uk that the page loads when you first print or export. Nothing is fetched from a content delivery network, so no third party learns that you loaded the tool.
Offline copy
CIC Maker installs a service worker so it can open without a connection. That stores a copy of the app's own files in your browser's cache. It stores no personal data, and it is removed when you clear the site's data.
Children
This is a workplace tool for food-manufacturing hygiene teams. It is not directed at children and collects no data from anyone.
Your rights
We hold no personal data about you, so there is nothing to request, correct or erase. Your cards are yours: they sit in your folder or your browser, and you can copy, export or delete them without asking us.
Changes to this policy
If the tool ever gains a feature that sends data anywhere, this page will say so plainly and the date above will change. It has never done so to date.
Contact
Questions about this policy: jakub@rimek.uk.
Jakub Rimek — freelance developer — Fife, Scotland — rimek.uk