Privacy Policy

1. Controller and contact

Wispboard is an independently operated service based in Poland. The individual operating the hosted Wispboard service is the controller of personal data processed for the service. Privacy requests can be sent to mail@wispboard.duckdns.org.

For a formal request, you may ask for the controller's full identifying and postal contact details. Wispboard does not currently appoint a data protection officer or EU representative.

2. Information Wispboard processes

Account data can include your username, display name, email address, email-verification status, password hash, account role, sign-in provider, creation time, recovery settings, and identifiers needed to own or access boards. Wispboard never stores your plaintext password.

Canvas data includes board titles, objects, images embedded in boards, folders, invitations, permissions, viewport preferences, collaboration presence, and timestamps. Anonymous drafts use a pseudonymous browser identifier and a short-lived server recovery copy.

Operational data can include session identifiers, consent choices, security and error logs, connection timestamps, user-agent information, and an IP address while it is needed to establish a connection or protect the service. Raw IP addresses are not retained in audience analytics.

3. Purposes and legal bases

Account, board, invitation, collaboration, export, verification, and recovery data is processed to provide the service you request and perform the agreement with you. Security, abuse prevention, service reliability, and limited operational records are processed for the operator's legitimate interests and the safety of users. Information may also be processed to comply with a legal obligation or establish, exercise, or defend legal claims.

Optional first-party analytics is processed only after consent. You may refuse or withdraw analytics consent from Cookie settings without losing core whiteboard functions.

4. Google sign-in data

If you choose Google sign-in or link a Google account, Wispboard receives a verified Google account identifier, email address, display name, and profile-image URL from a Google ID token. This data is used only to authenticate you, create or link your Wispboard account, display your profile, prevent duplicate account links, and protect account access.

Wispboard does not request access to Gmail, Google Drive, contacts, calendars, or other Google content. It does not receive your Google password and does not store Google access or refresh tokens. The ID token is verified by the server and the account fields listed above are retained until they are no longer needed, you unlink Google where available, or the account is deleted. Unlinking removes the Google identifier, linked Google email, and Google profile image from the link; an email retained as your Wispboard recovery or account email remains part of the Wispboard account.

Google user data is not sold, used for advertising, or transferred for unrelated purposes. Google's own processing during sign-in is governed by Google's policies.

5. Whiteboards, sharing, and administrator access

Saved boards are private by default. A board becomes accessible to others only through membership or an owner-controlled invitation. Anyone who receives a valid invitation may view the board and export a PNG copy without an account, and may edit it only when the owner or an authorized collaborator grants editing permission.

The administration interface provides searchable board records and read-only board previews. Viewing an administrative preview does not join the board, update collaborator presence, or identify the administrator as a participant. Administrators cannot edit a user's board through that preview, but they can delete a board or account when authorized. The server operator can access stored board data when reasonably necessary to maintain security, investigate reported or unlawful content, provide requested support, recover from failures, or comply with law. Administrative access is not used to watch ordinary private work.

6. Recipients and international processing

Board content is disclosed to people selected by the owner or people who receive a valid invitation. Personal data may also be disclosed to competent authorities or professional advisers when required by law or necessary to protect legal rights. Wispboard does not sell personal data or share it with advertising networks.

Core Wispboard storage and mail services are self-hosted. If you use Google sign-in, Google processes the authentication request and may process data outside the European Economic Area under its own privacy terms and transfer safeguards.

7. Retention

Active account and board data is kept while the account or board exists. Non-empty inactive boards may be converted into PNG archives after the retention period shown in the service. Empty boards and anonymous recovery copies may be removed automatically according to the current server settings. Session, verification, recovery, and security records expire when they are no longer needed for their purpose.

Deleted data may remain in rotating disaster-recovery backups for up to seven days before it is overwritten. Legal or security records may be retained longer where required or reasonably necessary for a claim or investigation.

8. Cookies, analytics, and automated decisions

Essential first-party cookies support authentication, security, invitation access, preferences, and anonymous draft recovery. Optional analytics uses a pseudonymous first-party identifier to measure returning visitors, pages, approximate country or region, device category, browser, and referrer. See the Cookie Policy for names and durations.

Wispboard does not use advertising profiling or automated decision-making that produces legal or similarly significant effects.

9. Security

Wispboard uses HTTPS, server-side verification of Google ID tokens, hashed passwords, access checks, session protections, input validation, restricted administration routes, and rotating backups. No internet service can guarantee absolute security, so users should keep independent exports of important work and report suspected compromise promptly.

10. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, or portability of your personal data. You may withdraw consent at any time without affecting earlier lawful processing. Wispboard may ask you to verify your identity before completing a request.

Requests should be sent to mail@wispboard.duckdns.org. You also have the right to complain to the Polish data-protection authority, the President of the Personal Data Protection Office (UODO), or another competent supervisory authority.

11. Changes

This policy may be updated when the service or its data practices change. Material changes will be announced through Wispboard where practical, and the effective date above will be updated.