Privacy Policy

1. Data controller

The controller of your personal data is the author of the DINBoard project (the “Controller”).

Contact on matters relating to the app and data protection: via the form in the app (“Report an idea/bug”).

The Controller runs the App as a private individual, without a registered business.

2. What data we collect

2.1. Project data (stored locally)

The DINBoard app stores your distribution board projects only on your device (in the browser storage — IndexedDB / localStorage). This data is not sent to any server and is not visible to the Controller. It includes:

• designed circuits, symbols and diagrams,
• project metadata, including any contractor / client details (name or company name, address, tax number, phone, email) that you enter yourself.

Deleting project data: clear the browser storage for the dinboard.pl domain or use the “New project” function in the app.

2.2. Analytics (Umami)

We use Umami (Umami Cloud) — a tool for anonymous statistics (pages viewed, referrer, country, device type) that also counts a few actions in the editor: creating a new project, opening a saved project, adding a device, opening the circuit list and building a board from it, saving a project, exporting to PDF (separately, exporting a project that has no devices yet), changing the interface language, and showing the request to support the project and clicking it. Only the name of the action is sent to Umami — never the project content, circuit names or files. Umami does not use cookies and does not allow users to be identified.

In the DINBoard Android app statistics are switched off — Umami runs only on the dinboard.pl website opened in a browser.

2.3. Contact form

When you send a report through the “Report an idea/bug” window, you voluntarily provide: an email address (optional) and the message content. The data is stored in the Controller's database on Cloudflare servers (Cloudflare D1). To limit spam, we also store a hash of the IP address. It is computed together with the date, so reports from different days cannot be linked, and we erase it when the first report of a later day arrives.

2.4. Hosting (Cloudflare)

The dinboard.pl website is served by Cloudflare (Cloudflare Pages). On every visit, Cloudflare servers process technical connection data — IP address, browser type and the requested address — in order to deliver the site and protect it against attacks. We do not use this data for statistics or to identify users.

2.5. Fonts

The site font is downloaded from the dinboard.pl server. The site does not connect to Google Fonts or any other external font servers.

3. Legal basis for processing

• Art. 6(1)(f) GDPR — the Controller's legitimate interest: analytics, security and replying to reports sent through the form.
• Art. 6(1)(b) GDPR — performance of a contract (providing the app service).

4. Recipients of data

Your data may be shared with the following entities:

• Cloudflare, Inc. — website hosting (Cloudflare Pages) and the database of form reports (Cloudflare D1).
• Umami Software, Inc. — anonymous analytics (Umami Cloud).
• Public authorities — only where required by law.

Data may be transferred outside the European Economic Area (USA) on the basis of a European Commission adequacy decision or standard contractual clauses.

5. Retention period

• Project data (local) — until you delete it or clear the browser storage.
• Reports sent through the form — up to 12 months after the matter is closed.
• Umami analytics data — up to 6 months.

6. Your rights (GDPR)

You have the right to:

• access your data (Art. 15 GDPR),
• rectification (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing (Art. 21),
• lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw), or the authority in the country where you live or work (Art. 77 GDPR).

Exercising rights relating to project data (local) requires action on your side — the app does not store it on a server.

7. Cookies and local data

The app uses the following categories of cookies and local browser storage:

• Essential local data — the project state and interface preferences are kept in the browser storage (localStorage / IndexedDB). Without this data the app does not work properly. These are not cookies, but the browser treats them similarly.
• Analytics — Umami (no cookies).
• Advertising — none. The site shows no ads and does not store any advertising cookies or marketing identifiers.

The site does not ask for cookie consent, because it does not store any advertising or analytics cookies. You can remove the technical data kept locally by clearing the browser storage for the dinboard.pl domain.

8. Security

Communication with the server takes place only over HTTPS / TLS 1.3. The app does not store any project data on the server. Passwords to external service accounts (Google, Cloudflare, Umami) are stored in line with their security policies.

9. Changes to the privacy policy

The Controller reserves the right to make changes to this policy. The current version, with the date of the last update given at the beginning of the document, is always available at https://dinboard.pl/en/privacy-policy.

10. Governing law

Matters not covered by this policy are governed by the GDPR and the Polish Act of 10 May 2018 on the protection of personal data.