Privacy policy

What we collect

Google sign-in. Board owners sign in with Google. From your Google account we receive only your email address and name, and use them to identify your account and to show who you're signed in as. We never see your password and don't access anything else in your Google account. People who join a board through an invite link don't sign in at all.

What you add to a board. The display name you choose, the board's name, items (titles, links, images and values), reactions, comments and votes. These are visible to the members of that board.

Feedback. If you send feedback, we store your message, your display name and the board you sent it from.

Link previews. When you paste a link, our server visits that page to read its title, image and price, and keeps a copy of the image.

Cookies and browser storage

We use three cookies, all needed for the app to work: sp_session keeps you signed in (up to a year), sp_pkce is used for a few minutes while you sign in with Google, and lang remembers the language you picked. Your browser's local storage remembers your display name and small preferences on your device.

There are no advertising or analytics cookies, and we don't track you across other sites.

How long we keep it

Boards, and everything on them, are deleted automatically 30 days after they are created, or sooner if the owner deletes the board. Unused images and expired sessions are cleaned up regularly. Feedback is kept while it's useful for improving the app. Your account's email and name are kept until you ask us to delete them.

Who processes it

Decider4000 runs on Supabase (database, file storage and sign-in) and Railway (app hosting), and uses Google for sign-in. They process data only to provide those services. We don't sell your data, share it with anyone else, or use it for advertising.

Decider4000's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your rights

You can ask for a copy of your data, or ask us to correct or delete it, by writing to [email protected]. If you live in the EU or UK you also have the rights given by the GDPR, including complaining to your data protection authority.

Changes

If this policy changes, we'll update this page and the date above.