What Crestlist keeps

No accounts. Crestlist asks for no name, email or password. A log is a random twelve-character code. This device keeps it in one cookie (__Host-cl_log); a security cookie is set on pages that have a form.

What a log holds: the names you type for climbers (use first names or nicknames), which high points each one reached, and any date and one-line note you add. Anyone with the private link can read and change the log.

Deleting: "Delete this log" on the log page removes it at once. Logs not opened for 365 days are deleted automatically. Nightly database backups are kept for 14 days.

Addresses: to limit abuse, Crestlist counts requests per address per day as a salted one-way hash, kept for two days. The web server keeps standard access logs.

No trackers: no tracking cookies, no analytics services and no outside fonts. The only thing that loads from another site is one banner ad on the public pages, described under Advertising; it sets no cookies and counts one page view per page as a daily total. Crestlist sends no email.

Payments: not switched on yet. When they are, PayPal handles them; Crestlist will not see card numbers.

Advertising

Since 17 October 2026 the home page, the list of high points, pricing and about show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind Crestlist. A high point page and the trip planner show it only while this device has no log. For now the ads are for WeldonPC’s own services. Your log, its private link, the progress sheet, a planned trip, this page and the terms never show an ad or load anything from adengine.us, and no page with an ad shows your climbers or visits.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site with those requests: the site’s address only, never the page’s.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC’s own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser’s site, which has its own privacy policy.
• Nothing about you is sold or shared.