Privacy

Privacy

Last updated October 17, 2026 (Advertising section added).

• No accounts, no email. We never ask for your name, email or phone number.
• Kitchen Basket. We store the items and quantities you enter, your last visit time and a salted hash of the basket's key (never the key itself). The key sits in a cookie on your browser (needed to open your basket) and in your private link after the # sign, which browsers do not send to servers.
• Feed link. The private RSS address carries its own separate token, so, like any feed address, it can appear in server access logs. Anyone with it can see which figures your basket follows. "Make a new feed address" resets it at once.
• Rate limits. To stop abuse we count new baskets and saves using a salted hash of the IP address; these counts are deleted after two days.
• Backups. The database is backed up nightly (the last 14 nightly copies are kept) and before each software update (kept only for restoring the site, never used for anything else).
• Server logs. Like any website, the server keeps standard access logs (address, page, time) for security, for a limited time, never sold or shared.
• No tracking cookies. No analytics services and no third-party fonts. The only outside service your browser talks to is the adengine.us banner on the public figures pages, described under Advertising; it counts one page view per page as a daily total.
• Payments. When the Figures Pass is switched on, PayPal handles payment; we receive only a subscription reference and status.
• Deleting. "Delete basket" removes it at once.

Advertising

The public figures pages (home, jobs, prices, the release wire, figure pages, pricing, sources and about) show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind The Figures Desk. For now the ads are for WeldonPC's own services. Kitchen Basket pages, Terms, this page and error pages never show one.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site (not of the page you are on) with those requests.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site. It never sees your Kitchen Basket.
• How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
• Nothing about you is sold or shared.

Questions: through WeldonPC.com.