Privacy notice
Last updated: 19 October 2026
This notice explains what information Task Card Compiler (the "tool") at tools.feianalytics.com handles, and why. The tool is provided by FEI Analytics Limited, Unit 2904, Universal Trade Center, 3 Arbuthnot Road, Central, Hong Kong ("we", "us"). We are the data user under the Personal Data (Privacy) Ordinance (Cap. 486).
1. Your documents stay on your device
Your PDF files are opened and compiled in your web browser. They are never uploaded to us. We never receive their content, file names or page text.
2. What our server receives
2.1 To draw signoff markings and build your saved document, the tool sends our server each page's size, visible area and rotation, the position and type of each marking (including any split rows and not-required cells), and your settings, such as block size, labels and line weight. None of this includes document content.
2.2 The preview fetches font, character-map and image-decoder files from our server by name. These requests show which fonts, text encodings and image formats a document uses, but never its content.
2.3 After the security check in section 3, our server issues a signed pass containing the tool's web address, a random session ID, the check time and an expiry time. The pass contains no personal details. It is held only in the memory of your browser tab, sent with each request and renewed automatically for up to 8 hours. It disappears when you close the tab.
3. Security check
3.1 To protect the tool from automated abuse, we use Cloudflare Turnstile. Each time you open the tool, a script from Cloudflare evaluates signals from your browser and device, such as your IP address, connection fingerprint and browser type, to tell people from automated traffic.
3.2 Cloudflare runs the check on our behalf. It also uses these signals, as a controller in its own right, to improve its bot detection. Details are in Cloudflare's Turnstile Privacy Addendum at cloudflare.com/turnstile-privacy-policy.
4. IP addresses, logs and rate limits
4.1 Each request reaches our server with your IP address, through our hosting provider Cloudflare. We use it to deliver the tool and to apply rate limits.
4.2 Rate-limit counts are kept in server memory in one-minute windows and then discarded. They are never written to storage.
4.3 Request records (time, IP address, address requested and response status) can be viewed by us only as a live stream when we investigate a problem. We do not store them. Cloudflare may keep its own operational logs under its privacy policy.
4.4 If we begin storing request records, we will update this notice first.
5. Usage statistics
We use Cloudflare Web Analytics to count visits and measure page speed. It records the page visited, timing information and technical details such as browser and device type. Cloudflare states that it uses no cookies or local storage for this, and does not fingerprint individuals.
6. Cookies and browser storage
The tool sets no cookies of its own. It keeps a few preferences in your browser's local storage, such as your block settings (block size, labels and line weight), the hints you have already seen, the last tip shown, your view settings and whether you paused the start animation. Your block settings are sent with each preview and save request, as described in 2.1. The rest stay on your device and are not sent to us. You can clear them at any time in your browser settings.
7. Feedback
7.1 During the beta, Send feedback opens a form on feianalytics.com, hosted by Squarespace. It collects:
- your message
- your email address, if you choose to give it
- any files you attach, up to five of 10 MB each
- technical details sent automatically with every message: the tool version, your browser, your device type and the code of the last error message shown. These never include file names or document content.
7.2 Giving your email address is optional. Without it we cannot reply.
7.3 Squarespace keeps a copy of each submission and sends it to our Microsoft 365 mailbox. The form uses Squarespace's own cookies and Google reCAPTCHA, which is subject to Google's Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms).
7.4 We use feedback only to investigate and fix reported issues, to improve the tool and to reply if we choose to. We never use your email address for marketing or add it to any mailing list.
7.5 Send attachments only if you are allowed to share them, and remove the personal details of any person first. We use attachments only to investigate and fix the reported issue, and delete them once it is fixed or closed.
7.6 We delete all feedback, including attachments, from Squarespace and our mailbox within 12 months of receipt.
8. Service providers and transfers
8.1 We share information only with the service providers named in this notice, so they can run the tool and its feedback form: Cloudflare for hosting, security and analytics, Squarespace for the feedback form, Microsoft for email and Google for reCAPTCHA.
8.2 These providers may process information outside Hong Kong, including in the United States. We rely on their data processing terms to protect the information and limit how long it is kept.
8.3 We do not sell or rent personal data. We disclose it otherwise only where the law requires.
9. Security
Information is encrypted in transit. Access to feedback is limited to the people at FEI Analytics who handle it.
10. Your rights
10.1 Under the Personal Data (Privacy) Ordinance you may ask whether we hold personal data about you, ask for a copy of it and ask us to correct it. We do not charge for this.
10.2 Write to the Data Protection Officer, FEI Analytics Limited, at the address above or at info@feianalytics.com. We will respond within the time the Ordinance requires.
10.3 The personal data we are most likely to hold is feedback. To help us find it, tell us the email address you used and the approximate date.
11. Professional use
The tool is intended for professional use and is not directed at children.
12. Changes to this notice
We may update this notice. The current version is always available in the tool and at tools.feianalytics.com/privacy, with its date.
13. Contact
FEI Analytics Limited, Unit 2904, Universal Trade Center, 3 Arbuthnot Road, Central, Hong Kong. Email: info@feianalytics.com.