Privacy Policy
Last updated: 2026-06-07. Data controller: Klarweb (DBA STH), org. 835 834 042.
What we collect
- Board content — the board name, teammate names, time-off entries, and active holiday countries you enter into a board.
- Operational metadata — IP-derived rate-limit counters and Sentry crash reports (with personally identifiable fields scrubbed before transmission).
What we don't collect
- No accounts. No email addresses. No passwords (apart from optional per-board hashes).
- No third-party advertising or tracking cookies.
How board access works
Each board has a 32-character random URL with 128 bits of entropy. Anyone with the URL can view and edit the board. If you set an optional password, we store a bcrypt hash — never the plaintext.
Remembering your boards
So you can find your way back without the secret link, your browser keeps a small list of the boards it has visited (name, slug, and last-visited time) in a cookie. Because it's a cookie, that list is sent to our server with your requests (always over TLS) so we can render “your boards” for you — the board slugs are already visible to the server anyway, since they're part of the board URL you're viewing. The list never identifies you and is never shared. Clear it any time with “Clear all” on the home page or by clearing cookies. See the Cookie Policy for details.
Analytics
We use Plausible Analytics for aggregated, cookie-less traffic stats (page views, referrer). No personal data is collected.
Where data lives
Board content is stored in a Postgres database hosted by Neon. Hosting infrastructure runs on Vercel.
Retention and deletion
Boards persist as long as they are accessed. To delete a board immediately, contact support@klarweb.no with the board URL.
Your rights
Under GDPR you have rights of access, correction, deletion, and portability. Contact support@klarweb.no to exercise them.
Contact
support@klarweb.no