1. Who we are
CoBoardy ("we", "us", "our") operates the CoBoardy website at coboardy.com and the CoBoardy Telegram bot. This Privacy Policy explains how we process personal data when you visit our website or contact us.
Data controller contact: hello@coboardy.com. For privacy requests, use our feedback form or email us directly.
2. Scope
This policy applies to personal data collected through this website. Use of CoBoardy inside Telegram is also subject to Telegram's own privacy terms. Our User Agreement describes service rules for the bot and Mini App.
Mini App and board content: by using the CoBoardy Telegram Mini App, you agree to the current version of this Privacy Policy and the User Agreement. Board drawings and other content may be lost or corrupted; do not store irreplaceable information on boards and keep your own copies outside CoBoardy. See section 3 of the User Agreement for details.
3. Personal data we collect
Depending on how you interact with us, we may process:
- Website technical data: IP address, browser type, device information, and server logs when you load pages (standard web hosting).
- Cookie and storage data: theme preference and cookie consent choices stored in your browser. See our Cookie Policy.
- Feedback form data: name (optional), email address, message content, category, optional screenshot, and a Cloudflare Turnstile verification token when you submit the form.
- Communication data: any information you include when contacting us.
We do not sell your personal data.
4. Why we use your data and legal bases (GDPR)
- Provide and secure the website (Art. 6(1)(f) legitimate interests): hosting, abuse prevention, and basic site functionality.
- Remember your preferences (Art. 6(1)(a) consent or Art. 6(1)(f)): theme and cookie choices where applicable.
- Process feedback (Art. 6(1)(b) steps prior to contract or Art. 6(1)(f)): respond to your message and improve the product.
- Spam protection (Art. 6(1)(f)): Cloudflare Turnstile on the feedback form when you enable functional cookies.
- Legal compliance (Art. 6(1)(c)): where required by applicable law.
5. Cookies and similar technologies
We use browser storage and, with your consent, third-party functional tools. You can accept, reject, or customize non-essential categories via the cookie banner or in the footer. Details are in our Cookie Policy.
6. Recipients and processors
We may share data with service providers that help us operate the site, including:
- Hosting and infrastructure (website delivery, server logs).
- Supabase (storage of feedback submissions and optional attachments on our self-hosted backend).
- Cloudflare Turnstile (bot/spam protection when functional cookies are enabled).
- Google Fonts (typography delivery when functional cookies are enabled; your IP address may be processed by Google).
We require processors to handle data only on our instructions and with appropriate safeguards.
7. International transfers
Some providers may process data outside the European Economic Area (for example, Cloudflare or Google). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by those providers.
8. Retention
- Cookie consent records: until you clear site data or we update consent version.
- Theme preference: until you clear site data or change the setting.
- Feedback submissions: for as long as needed to handle your request and maintain a reasonable support history, then deleted or anonymized unless law requires longer retention.
- Server logs: typically rotated within a limited period defined by our host.
9. Your rights
If you are in the EEA, UK, or another jurisdiction with similar laws, you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data ("right to be forgotten") in certain cases
- Restrict or object to processing in certain cases
- Data portability where applicable
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with your local supervisory authority
To exercise these rights, contact hello@coboardy.com. We may need to verify your identity before responding.
10. Children
CoBoardy is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can delete it.
11. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may also be reflected in the cookie banner version where relevant.
12. Contact
Questions about this Privacy Policy? Send feedback or email hello@coboardy.com.