Privacy Policy
Last updated 3 September 2026
This policy has not been reviewed by a lawyer. It names a real controller and describes what the application actually does today, but treat it as a working draft until it has had a legal read.
Who runs Work Planner
Work Planner is operated by Vit Busek, the controller of the personal data described here. For anything in this policy, including any of the requests under “Your rights”, write to busek.vit@gmail.com.
What we collect
Five things, and nothing beyond them:
- Your profile from Google or GitHub — name, email address, avatar URL, and the account identifier your provider uses. We receive this when you sign in. We never see your password.
- What you create — boards, columns, cards, descriptions, due dates, and comments, and any files you attach to a card — their contents, filename, size and type — along with who made them and when.
- A record of board activity — a record of what changed on a board and who changed it, kept for the most recent 500 changes to that board.
- A session cookie — so the app knows you are still signed in between page loads.
- Invitations — if you invite somebody to a board, we store the email address you type. We delete it when the invitation is accepted, declined or withdrawn. An invitation expires 30 days after it is sent and can no longer be accepted, but an expired invitation nobody withdraws stays in the database until that address is invited to that board again, or the board is deleted. If you delete your account, invitations addressed to you go with it.
There is no analytics, no advertising, no profiling, and no third-party tracking script.
Why we collect it, and the legal basis
Your profile and your board content are processed to give you the account and the boards you asked for — the legal basis is performance of a contract. Keeping sign-in sessions secure and preventing abuse rests on our legitimate interest in running the service safely. We do not use any of it for marketing.
Cookies
Only the sign-in session cookie and the CSRF and callback cookies the authentication library needs. All of them are strictly necessary to sign you in, so there is no consent banner. If analytics, session replay, or any other third-party script is ever added, this section changes and a consent mechanism becomes necessary first.
Who else processes your data
| Who | What for | Where |
|---|---|---|
| Vercel | Hosting and serverless functions | EU — Frankfurt (fra1) |
| Neon | Postgres database | EU — Frankfurt (eu-central-1) |
| Pusher | Realtime board updates | EU |
| Cloudflare R2 | Attachment storage | EU — jurisdiction-restricted |
| Sign-in, if you choose it | Per Google’s own policy | |
| GitHub | Sign-in, if you choose it | Per GitHub’s own policy |
Your board data stays in Frankfurt: the database is pinned to eu-central-1 and the functions that read and write it are pinned to fra1. Realtime updates go through Pusher’s EU cluster. Vercel’s CDN serves static pages from whichever location is nearest you, so a request made from outside the EU is logged at a point of presence outside it — that log holds an IP address and a URL, never board content.
Who can see your boards
Anything you write on a shared board — card titles, descriptions, due dates, comments, and your name and avatar — is visible to every other member of that board. Treat a shared board as visible to the people you shared it with, and do not put anything on one that you would not want them to read.
Keeping and deleting your data
Your account and board content are kept for as long as your account exists. You can delete your account yourself from the account page: it removes your sign-in, your sessions, the boards you own and everything on them, immediately and permanently. Boards owned by other people keep the comments you left on them, without your name attached — if you want those removed as well, email busek.vit@gmail.com before you delete your account, because afterwards nothing links them to you. Files you attached to boards owned by other people stay on those boards too, and stop being linked to you, on the same terms and for the same reason. The record of what you did on a board, on the other hand, is deleted with your account, on every board — it is a record of an action rather than something you wrote, so nothing another member left goes with it.
Your rights
Under the GDPR you can ask for a copy of your data, correct it, have it deleted, receive it in a portable format, or object to how it is processed. Write to busek.vit@gmail.com and we will respond within one month.
If you think we have handled your data badly, you can complain to the Czech supervisory authority, Úřad pro ochranu osobních údajů (uoou.gov.cz).
Changes to this policy
When this policy changes, the date at the top changes with it. If a change materially affects how your data is handled, we will tell you by email before it takes effect.