Privacy

Last updated 1 November 2026

Who we are

Sijil is a free tool made by Chronorisks, the makers of Ledger and Mutabaqa. Questions or requests: support@chronorisks.com.

Your register

The risks you keep, the scores, owners, controls, actions and the organisation name you type are kept in your browser's storage on your device, so a refresh or a later visit doesn't lose them. When you press Download, they are sent to our server, turned into the Excel file and sent back; the server keeps nothing afterwards. When you upload a file to carry on, it is read in memory, its contents are sent back to your browser, and it is discarded. Our logs never contain anything from your register.

Owner names you type can be personal data. You decide what to enter, and you should only enter data you are allowed to use.

What else we process

• Your network address (IP). Held in memory for at most 24 hours, only to limit how often one visitor can use the tool, so it stays free for everyone. It is not written down or logged.
• Anonymous usage events. Our server records the steps of a visit (page opened, sector and size picked, risks kept, dropped or added, details opened, register downloaded or uploaded) with facts about them: the page language, the referring website's name and campaign tags (for example "linkedin.com"), the country (looked up from your network address on our server; the address itself is not passed on), the type of device, browser and operating system, the sector, size and category of risks, and counts such as how many risks were kept or scored. No text you typed is included: no names, descriptions or actions. The steps of one visit are linked by a random code that lives only in your open browser tab and is gone when you close it.
• Where the events go. We use PostHog (PostHog Inc.) to store and chart these events, in its European Union region (Frankfurt). PostHog does not receive your network address and sets nothing in your browser.
• Feedback, reminders and "coming soon". If you answer "Was this useful?", ask for a quarterly reminder, or press a feature that isn't ready yet, we keep your answer and, only if you typed it, your email address, on our server. We use the email only for what you asked: to reply, to remind you, or to tell you when that feature is ready. Every reminder email has a link to stop them, and you can ask us to delete what you sent at any time.

Your browser

The page stores in your browser: your draft register, your language choice, a "been here before" flag, the random code for the current tab (removed when the tab closes), and a short history: the day of your first visit, how many registers you have downloaded, and the day of the last one. Usage events only carry rough ranges from the history (for example "2 to 5 before, the last one within a month"), never the dates, your draft or a code that follows you from one visit to the next. Clearing your browser's site data removes all of it, including the draft, so keep your Excel file. There are no cookies, so there is no cookie banner. Fonts are served from our own server.

Where

The service runs on a server in the United Kingdom, operated for Chronorisks by our hosting provider, IONOS. Usage events are stored by PostHog in the European Union.

Country lookup: IP Geolocation by DB-IP, licensed under CC BY 4.0.

Your rights

Apart from what you choose to send us, we hold no personal data about you beyond the short-lived items above, and nothing we could look up by your name. If you have a question or a request, email support@chronorisks.com and we will reply within 30 days. You can also complain to your data protection authority.

Changes

If we change this page, we update the date above. If we ever add accounts or paid plans, we will say so on the home page first.