Privacy Policy

KanbanThing has no accounts, so we never ask for your name, email address, or any other identifying detail. This page explains what is stored anyway, and who else can see it.

What we store

• The boards you create: the board name, its columns, and the cards on it, including any text, colors and due dates you enter.
• The board password, stored as a hash so it cannot be read back.
• Aggregate counts of boards created, cards created and cards moved. These are totals only and are not linked to a board or a person.

Board content is stored with Supabase, which hosts our database. Anything you type onto a card is stored as you typed it, so do not put passwords, payment details, or other sensitive information on a board.

What your browser stores

KanbanThing keeps the id of your board in this browser's local storage, along with its name, expiry/opened metadata, and an anonymous count-only thumbnail. It keeps the password you entered in this tab's session storage, so a reload in the same tab does not ask for it again when session storage is available. If the browser blocks session storage, a newly entered password stays in page memory only and is lost on reload. Closing the tab or choosing Lock board clears the saved password. Existing browser-local passwords are migrated when they are next used and session storage is available. The password is still plain text to this site: session storage is not encryption and can be read by same-origin scripts, extensions, or anyone with access to the browser profile. Clearing browser data removes the board list, and you will need the board link and password to get back in.

Who can see your board

Anyone with the board link and the board password can read and change the whole board. Boards are not listed anywhere and are not indexed by search engines, so sharing the link is the only way to give access. Treat the link and password as the access control they are.

How long we keep it

Boards are deleted 60 days after they are created, along with their columns and cards. There is no way to recover a board after that, so copy out anything you want to keep.

Analytics and advertising

We use Google Analytics to understand how the site is used, such as which pages are visited and how many boards get created. We use Google AdSense and AdMaven to show advertising, which pays for running the site. These third parties set their own cookies and may use your IP address, device information and browsing activity to measure or personalize the ads you see. Their own privacy policies govern that processing, and Google's advertising settings let you control ad personalization across sites that use Google.

What we do not do

We do not sell your data, we do not build advertising profiles ourselves, and we do not read your boards for anything other than operating the service.

Changes and contact

This policy may be updated as the site changes. If you have a question about it, reach us at @kanbanthing on Bluesky.