Privacy

Who is responsible

Flowboard is run by Ola Rosiak. For anything about your data, write to contact@olarosiak.com.

What is stored, and why

To give you an account and show you your board, Flowboard stores your email address, your display name, and either a hashed password or the account identifier from Google or GitHub. It stores the projects and tasks you create. An email address is required — without one you cannot have an account. The legal basis is the contract between you and Flowboard.

A session cookie keeps you signed in. There are no advertising or analytics cookies, and no tracking. Sign-up and password forms are checked by a bot test, on the basis of a legitimate interest in preventing abuse.

If you sign in with Google or GitHub, Flowboard receives your email address, your name and an account identifier, and uses them only to create your account and let you back into it. Nothing else is read from that account and nothing is written back to it. Your data is never sold, never used for advertising, and never used to train machine learning models.

Who else handles it

Supabase stores the accounts and the database, in Ireland; Vercel serves the site; Resend sends the confirmation and password-reset emails; Cloudflare runs the bot test. They act on instructions only, and where any of them operates outside the European Economic Area the transfer relies on the European Commission's standard contractual clauses.

Traffic is encrypted in transit, the database is encrypted at rest, passwords are stored only as hashes, and database rules keep every account to its own projects and tasks.

How long it is kept, and your rights

Your data is kept until you delete it. Deleting your account from the settings page removes your profile, projects and tasks, though copies can remain in the providers' routine backups for a short time.

You can ask for a copy of your data, a correction, deletion or a portable export, and you can object to how it is used — write to the address above. You can also complain to the data protection authority for the country you live in.