1. Overview

This Privacy Policy explains how we collect and use personal data when you use this website.

By using the service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• First name
• Last name
• Email address
• Password (stored in a hashed form)

2.2 Feedback and User Content

When you use the service, we collect and store:

• Feedback submissions (including suggestions, issues, and improvements)
• Messages and content associated with feedback boards
• Board metadata (such as board names and URLs)

Feedback may be submitted with or without an account.

If feedback is submitted without authentication, it may optionally include an email address if the user chooses to receive updates.

2.3 Anonymous or Non-Authenticated Submissions

When feedback is submitted without an account:

• We do not intentionally collect IP addresses, device fingerprints, or tracking identifiers as part of the submission process.
• If an email address is provided, it may be used only to send updates related to that specific feedback.

2.4 Technical Data

We collect limited technical information necessary to operate and secure the service, including server logs.

These logs may include information such as:

• Timestamps of requests
• Requested resources (e.g. board URLs)
• Error messages and system events
• Basic request metadata required for debugging and security

This data is used for operational stability, debugging, and abuse prevention.

3. How We Use Information

We use collected data to:

• Provide and operate the service
• Allow users to create and manage feedback boards
• Process and display feedback submissions
• Authenticate users and secure accounts
• Prevent abuse and ensure platform stability
• Debug and monitor system errors

We do not sell personal data.

4. Cookies

We use only strictly necessary cookies required for the operation of the service, including:

• Authentication cookies (to maintain user sessions)
• Security cookies (including bot protection via Cloudflare Turnstile)
• Rate-limiting cookies (to prevent abuse)

We do not use cookies for advertising, profiling, or marketing purposes.

No consent banner is used because cookies are limited to essential functionality.

5. Feedback Visibility and Expiry

Feedback submitted to a board is initially private and may not be publicly visible.

Each submission has a review period. If it is not reviewed within that period, it expires.

Expired feedback:

• Remains stored in the database
• Is not publicly visible
• Cannot be accessed, reviewed, or modified by board owners or users
• May only be accessed by the system operator for administrative purposes

6. Data Sharing

We do not sell personal data.

We may share limited data only when necessary to:

• Operate the service (e.g. hosting or infrastructure providers once selected)
• Comply with legal obligations
• Protect the rights, safety, or security of users or the platform

7. Data Retention

We retain personal data only for as long as necessary to operate the service.

Retention varies by data type:

• Account data: retained while the account is active
• Board data: retained while the board exists on the platform.
• Feedback data: retained while the feedback exists on the platform. Feedback that has been deleted or expired may continue to be retained in a non-public form for operational and administrative purposes.
• Server logs: retained for up to 30 days for security and operational purposes, unless required longer to investigate security incidents or abuse.

8. Account Deletion and Deactivation

Users may delete or deactivate their account at any time.

Deactivation

• The account becomes inactive
• Boards created by the user become inaccessible
• Feedback submitted by others remains visible or pending within those boards

Full Account Deletion

When an account is deleted:

• The user account is permanently removed
• Boards created by the user are removed or become inaccessible
• Feedback submitted by others on those boards may become orphaned and no longer associated with a visible board
• Feedback submitted by the user on other boards remains visible but is anonymised

9. Data Security

We use reasonable technical and organisational measures to protect data, including password hashing and secure access controls.

However, no system is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have rights under data protection laws, including:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Restriction of processing

To exercise these rights, contact us via the contact page.

11. Third-Party Services

We use limited third-party services to operate the platform, including:

• Cloudflare Turnstile for bot protection
• Hosting and infrastructure providers (not yet finalised)

We do not use analytics, advertising networks, or tracking services.

12. Children’s Privacy

This service is not intended for users under the age of 16. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the service means you accept the updated version.

14. Contact Us

If you have any questions about this Privacy Policy, you can contact us through the contact page.