Production-candidate policy · last reviewed September 30, 2026
Short version: Next Time Home is designed to work without an account and without a server-side family profile. Assessment and completion state stay in your browser unless you choose the secure device-transfer feature described below.
Data we intentionally do not request
Do not enter names, passwords, backup codes, account numbers, medical records, recovery secrets, or other sensitive information. The core assessment uses predefined choices rather than free-text family notes.
Local storage
Your browser may store selected answers and completed tasks so you can continue later. Clearing browser/site data can remove this local state.
Analytics
Cloudflare Web Analytics measures aggregate site traffic and performance. Assessment and ordinary product-action counters stay in your browser and are not transmitted to Next Time Home or an analytics provider. The optional handoff service keeps daily aggregate counts of events such as transfer creation, claim, resume, and error; these counters do not contain assessment answers, transfer identifiers, ciphertext, keys, or claim tokens.
External links
Official-source and future optional product links may lead to third-party sites governed by their own policies.
Contact
For material corrections, site issues, rights matters, or business and legal communications, see Legal & Site Issues. Never send passwords, account numbers, medical information, backup codes, or recovery secrets.
Local-only usage counters
The current build may keep simple usage counters in your browser (for example, that a Guide was viewed or a plan was started). These counters are stored locally and are not transmitted to Next Time Home or an analytics provider. We do not put assessment answers, passwords, account details, recovery secrets, or parent names into analytics events.
Aggregate site traffic and performance are measured through Cloudflare Web Analytics. Product-action counters remain local-only.
Guide completion progress
When you mark an Action Guide as done, that completion status is stored only in this browser using local storage. Next Time Home does not receive the completion list. Clearing site data can remove it.
Device-to-device transfer
If you choose to move your plan, the plan is encrypted in your browser. The server temporarily stores only encrypted data. It can be claimed for up to 10 minutes and is deleted immediately when claimed. After expiry it cannot be claimed; expired rows are purged during later handoff activity. The decryption key stays in the URL fragment (after #), which browsers do not include in the HTTP request. A transfer can be claimed only once. Anyone who receives the private QR code or link while it is valid may be able to import the plan, so treat it as private.
For abuse prevention, the handoff API converts the connecting IP address, a secret, the endpoint category, and a short time window into a one-way rate-limit bucket. The raw IP address is not written to the handoff database. Cloudflare still processes network request information as the site infrastructure provider.
Local usage measurement
Next Time Home may count basic actions such as starting or completing the assessment, viewing or completing a Guide, or viewing a commercial page. In the current measurement phase, these counters are stored only in your browser and are not transmitted to Next Time Home. Assessment answers, transfer codes, passwords, recovery secrets, and page text are not analytics fields.
Aggregate traffic analytics
Next Time Home may use privacy-focused aggregate traffic measurement to understand page visits and site performance. Product actions such as assessment progress and Guide completion remain local-only unless this policy is updated. We do not use assessment answers, transfer payloads, passwords, recovery secrets, or free-text content as analytics fields.