Privacy policy

This is a placeholder, not a privacy policy. It records what the boilerplate itself collects so you have somewhere factual to start. Replace it with a reviewed policy naming your data controller, your lawful basis, your retention periods and your contact address before this site goes live.

Two things in this codebase process personal data as it stands, and both are listed here so a replacement policy does not miss them.

Accounts

Signing up stores an email address and a full name, and signs you in with a session cookie that browser JavaScript cannot read. The account record is kept until the account is deleted.

Error reporting

When something breaks, a diagnostic report is sent to Sentry so it can be fixed. Reports are scrubbed before they are sent, but they are processed outside this application and belong in any list of third parties your policy has to disclose.