Privacy Policy
Terms of Use & Data Practices
Privacy & Data
Privacy matters, even for a small hobby project. Here is exactly what happens with your data.
What Gets Collected
- –Your post-its — Temporarily held in server memory during the active session only
- –Your votes — If voting is enabled during the session
- –Action points — Created during the retrospective, stored temporarily
- –Display name — If you choose to set one for your session
- –Session room code — Used to connect you with your team
- –Standard server logs — Your IP address may be briefly seen by the hosting infrastructure
What Does Not Get Collected
- –No user accounts or login data
- –No cookies or tracking scripts
- –No analytics or advertising
- –No retrospective history
- –No permanent storage of any session data
Where Your Data Goes
- –Vercel — The front-end is hosted on Vercel (US-based). Vercel may collect standard server logs such as IP addresses and access timestamps as part of normal infrastructure operation.
- –Railway — The real-time WebSocket server runs on Railway (US-based). Session data — post-its, votes, action points, display names, and room codes — is held in server memory only for the duration of the active session and never written to disk.
When Your Data Disappears
- –When you close the session
- –Automatically after a period of inactivity
- –When the last participant leaves the room
In short: your data exists only for the duration of an active session, then it is gone.
Terms of Use
Acceptable use
- –Legitimate sprint retrospective sessions
- –Respectful session names, display names, and card content
Prohibited use
- –Attempting to hack, abuse, or disrupt the system
- –Any illegal or harmful purpose
As a hobby project, this tool
- –Is provided free of charge
- –Carries no warranty or guarantee of uptime or correctness
- –May have bugs or experience downtime from time to time
- –May be updated, changed, or discontinued without notice
- –Should be used at your own risk for non-critical purposes
Service availability
Every reasonable effort is made to keep the service running smoothly, but 100% uptime cannot be guaranteed. This is not a commercial service with SLAs. For guaranteed reliability, a dedicated commercial retrospective tool would be a better fit.
Your Rights
Regardless of scope, you have rights regarding your data:
- –Want your data deleted? Close your session — it is removed automatically.
- –Want to know what data is stored? Nothing is retained beyond the active session.
- –Have concerns about privacy? Get in touch and they will be addressed.
For users in the EU: additional rights apply under GDPR, including the right to file a complaint with your local data protection authority if you believe your data has been misused.
Security
The tool is built with reasonable security practices in mind:
- –Data is transmitted over encrypted connections (HTTPS)
- –No passwords or sensitive information are stored
- –Session codes should be kept private — treat them as temporary passwords
That said, this is a hobby project, not a bank. Avoid putting sensitive business information in post-it cards or session names.
Minors
This tool is not designed for use by children. Users under the age of 13 (or 16 in the EU) should obtain parental permission before using it.
Changes & Updates
This page and the tool itself may be updated from time to time. For major privacy-related changes, the date below will be revised accordingly.
Last Updated: March 08, 2026
Contact
Questions, concerns, or feedback? Reach out any time.
Email: david.boissevain@proton.me
Disclaimer
This tool is provided "as is" without any warranties. No liability is accepted for issues, data loss, or problems arising from its use. It is a free hobby project — please set expectations accordingly. By using this tool, you agree to these terms.