No accounts, no cookies, no analytics. The site is static files served from a content delivery network. There is no server-side code, no login and no tracking script.
Everything runs in your browser. The ranking and the placement optimiser compute from a dataset that ships with the page. Calculations do not call a remote API. Your filters, the theme you chose and a placement scenario are kept in your browser's local storage and in the page URL so you can share a link; clearing site data removes the local copy. Opening or sharing a scenario URL sends its query string to the site and anyone you share it with; avoid putting secrets or personal data in workload names.
No third-party requests. Fonts, scripts, styles and the solver are served from this domain. The Content-Security-Policy the site sends forbids requests to any other origin, and the build fails if one appears.
Server logs. The content delivery network keeps standard access logs (IP address, time, path, query string, user agent) for 90 days to spot abuse and outages. They are not joined to anything and are not shared.
Security reports. See /.well-known/security.txt. How the numbers are made is on the methodology page.