Privacy during development.
Cargonic is a Flying Penguin product prototype. This notice describes the current development website and private demo workspace.
The public website
Optional Google Analytics 4 measures visits and public contact or workspace link clicks only after you allow analytics. It is not loaded before your choice or when you reject it. We do not use advertising features, Google Signals or analytics inside the private workspace. We remove URL query strings and referrers from the page information we send. Cloudflare hosts the service and may process request metadata, such as IP address, for delivery and security. Contact links open Flying Penguin’s separate website.
Optional analytics and cookies
Your analytics choice is stored in this browser for six months. If you allow analytics, Google receives public website usage information and uses first-party _ga and _ga_ cookies, configured to expire after six months. Google may process request information, including your IP address, to provide the service. Read Google’s privacy policy. Use Cookie choices at the foot of this page to withdraw or change your choice at any time. Rejecting removes our Google Analytics cookies and stops collection. A browser that blocks storage can apply your choice for the current visit only.
A separate local preference remembers your light or dark theme. Workspace session cookies are necessary for invited sign-in and are separate from optional analytics. There are no public enquiry forms on this prototype.
Workspace access
Sign-in checks an invited email address and a server-generated private access key. The server stores a hash of the key, not the key itself. Session records contain the invited email, a hashed random session token and an expiry time. A secure, HTTP-only cookie keeps you signed in for up to eight hours.
To limit repeated sign-in attempts, a hash derived from the request IP and a time bucket is stored temporarily. Successful sign-in also removes expired attempt and session records. Do not share your access key. Individual account keys can be rotated by the owner; they are shown only once when created. This prototype has no multi-factor authentication.
Demonstration records
The operational workspace contains fictional records. Orders, draft invoices, delivery photos and signatures, costs, activity records and booking requests are saved in a private Cloudflare database. Individual accounts are assigned a planner, driver or customer role. Customer and driver access is limited to the jobs assigned to that account. The owner can create or disable individual access, which revokes that person’s sessions. A server change history records the acting email, action, job reference and time. These shared records are not removed by clearing browser storage. Contact the Flying Penguin team to request access or data removal. This remains a prototype: use fictional records and test signatures or images, not real customer, driver or confidential business information.
Questions or access removal
Contact the Flying Penguin team through the contact page to request removal of your invited access. Sign out to revoke the current session. This prototype does not offer public registration or automated password recovery.
Last updated: 15 October 2026.