Privacy
This page describes the personal data StripR actually holds, why it holds it, and when it is deleted. It describes what the code does today — not what we intend it to do.
Why you received an email from us
Your address is in StripR because someone invited you to a Board, or sent you a share link. We did not obtain it from anywhere else, and we do not use it for anything but delivering what was sent to you. Every invitation email carries a link to stop further invitations.
What we hold, and for how long
| Data | Why we hold it | Legal basis | Retention |
|---|---|---|---|
| The email address of a person invited to a Board | To send them their access link, and to show the Board owner who has access. | Legitimate interest — the invitation is a transactional message sent on behalf of the person who invited you. | Deleted 30 days after the access is revoked (by the owner, or by you leaving). |
| The email address of someone you sent a share link to | To deliver the link they were sent, and to show the sender whether it went out. | Legitimate interest — a transactional message you asked us to send. | Kept while the share is live. Deleted 30 days after the share expires or is removed. |
| The email address of the person who created a share or a Board | To identify the sender, and to let them claim their shares with an account. | Necessary to provide the service you asked for. | Kept for as long as the share or Board exists. |
| Access logs: a pseudonymised fingerprint of the visitor (a hash of IP address and browser), plus what was accessed and when | To keep an honest record of what was served, and to answer abuse reports. | Legitimate interest — security and abuse handling. | No defined retention today: these logs are append-only by design and are not deleted. The fingerprint is pseudonymised — it could be traced back to a person if both our database and our application key were compromised. |
| Session data (IP address, browser) | To keep you signed in, or to keep a Board open once you have proved your email address. | Necessary to provide the service. | Rotated and expired by the framework; a session that is not used expires on its own. |
| The name and email address of a person who created an account | To sign you in, and to link the accesses you were given to your account. | Necessary to provide the service you asked for. | Kept for as long as the account exists. There is no self-service deletion screen yet — write to the privacy contact below and a human will erase it. |
Shares you chose to keep
A share you keep permanently never expires, so the addresses you sent it to are kept for as long as that share exists — the link still works, and we need the address to have delivered it. Remove the share and those addresses are deleted 30 days later, like any other.
If you asked us to stop inviting you
When you use the "never invite me again" link, we keep that one line — your address on that one Board — precisely so that we can honour it. Deleting it would mean forgetting your request, and the next invitation would reach you again. It is kept to protect you, not to keep you.
If you want your address erased entirely, write to us at the privacy contact below and we will do it by hand.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be erased. There is no self-service erasure screen yet — write to the contact below and a human will handle it.
Privacy contact: [to be completed]