Privacy policy

Last updated: July 17, 2026

Simpleban is a small kanban board for two people, built and run by a solo developer. This policy explains, in plain English, exactly what data the app touches and why. There is no ad network, no data brokering, and no tracking beyond basic aggregate analytics.

What we collect

Only what the app needs to work:

  • Your account — your email address and, optionally, a display name.
  • Your content — the boards, columns, cards, notes, and comments you create, plus related details like card assignments and timestamps.
  • Aggregate usage — anonymous, aggregate analytics about how the site is used (page views, rough traffic patterns). We do not build advertising profiles.

We do not ask for payment details, phone numbers, or any sensitive categories of data.

How it’s used

Your email and name identify your account, let you and your one teammate share a board, and let us send you transactional email (magic links and password resets). Your content is stored so your boards sync across your devices. Aggregate analytics help us understand which pages are useful and where the app is confusing. We never sell your data and never share it for advertising.

Where it lives & who processes it

Simpleban runs on a short list of trusted service providers (subprocessors), all handling data in the United States:

  • Vercel — hosts and serves the application.
  • Supabase — provides the Postgres database and authentication that store your account and content, protected by row-level security so you only reach your own data.
  • Google Analytics — provides aggregate usage statistics.
  • Resend — sends transactional email such as magic links and password resets.

Each provider processes data only to deliver its part of the service.

Cookies & localStorage

We keep browser storage minimal. A cookie is used to keep you signed in. Your browser’s localStorage holds your theme preference (light or dark) and the state of the try-it-out demo board on the homepage — that demo board stays on your device until you create an account. Google Analytics sets its own cookies for aggregate measurement. There are no third-party advertising or cross-site tracking cookies.

Data retention & deletion

We keep your account and content for as long as your account is active. You can delete a board, card, or comment at any time inside the app. To delete your whole account and all its data, email amir@sadeghi.me and it will be removed.

Your rights

Wherever you live, you can ask to access a copy of your data, correct it, or have it deleted, and you can object to how it’s used. These reflect the spirit of laws like the GDPR and CCPA. To exercise any of these, just email amir@sadeghi.me. Since Simpleban is run by one person, requests are handled directly and promptly.

Children

Simpleban is not aimed at children under 13, and we don’t knowingly collect data from them. If you believe a child has created an account, email us and we’ll remove it.

Changes to this policy

If this policy changes, we’ll update the date at the top of the page. Meaningful changes will be called out clearly rather than slipped in.

Contact

Questions about privacy? Email amir@sadeghi.me — it reaches the person who built the app.