Privacy Policy

We try to collect as little as possible. Free use, no account We do not ask for your name or email address. Your boards, including uploaded images, are autosaved in your browser on your own device and are not sent to our servers. The same goes for the 3 boards you can save on the free plan (see "Your device"). Pro accounts If you buy Pro, we receive limited account information through our payment provider (Stripe) and our sign-in system (Supabase): - Your email address - Your plan, subscription status and Stripe customer ID - Sign-in and session information needed to keep you signed in - The boards you choose to save to your account, with their images and a small preview picture, and the time they were last changed Things you choose to send us - Contact form messages, tool requests (with the optional email you add, used only to reply) and post-print feedback. These are emailed to us and not stored on the site. - If you email a board, the PDF is sent to the address you enter. We use it to send that email and don't keep a list of those addresses. - If you make a share link, the board is stored on our servers so the link can show it (see "Share links"). - If you cancel Pro, you can tell us why. We read that and may send you one short follow-up email. Searches When you search for photos or GIFs, your search words and a random browser ID (see "Cookies") are sent to our server, which asks Pixabay or GIPHY for results. We use the ID and your IP address to count searches against the daily or hourly limit. Technical and usage data - Usage analytics and session recordings through Microsoft Clarity (see "Analytics") - Anonymous page-view and speed statistics through Vercel - Your IP address, kept briefly for security, abuse prevention and rate limits - Basic logs of sign-in link requests - Error reports when the editor or a page crashes. They include which page and a technical code, not the content of your boards.

We use what we collect to: - Run the Service: show your boards, save them, send sign-in links and the emails you ask for - Take payments and manage subscriptions - Keep the Service safe, and stop abuse and over-use - Understand how the site is used and fix problems - Answer your messages We do not sell your personal information. We do not use it for advertising, and we do not build advertising profiles.

Cookies - Sign-in: a secure cookie or token that keeps you signed in to Pro - tb_visitor: a random ID with no personal information. It counts free searches and share links per browser. It lasts up to a year. - Microsoft Clarity sets its own cookies to group a visit's page views together We do not use advertising or cross-site tracking cookies. Your device Your browser also stores things for the site to work, on your device only: - Your current board for each board type, so it is still there when you come back - The last few pictures you added from your device (a file, a drop or a paste), so you can use one again. You can clear the list in the editor - On the free plan, up to 3 saved boards - Settings such as your timer choices, skin tone, which editor layout you chose, the symbols you picked most recently, collapsed panels, the name shown on share links, and small counters (searches used, sessions started, which board has the free reward video or GIF) - The page that brought you here (such as a campaign name, and where you were before a free printable page), whether you chose the full editor on a small screen, and whether the "customize this board" panel after a free download was already shown, kept for the visit - The files that let TokenBoards open without a connection (see "Installed app and offline use") You can clear all of this at any time by clearing your browser's site data. That also removes boards saved only on your device.

We use Microsoft Clarity to see how people use TokenBoards: clicks, scrolling and which features are used, through session recordings and heatmaps. We use this to improve the product. Text you type into fields is masked and is not recorded. We also mask learner names, board titles, email addresses and share links on the pages where they appear. Pictures on a board can appear in a recording. Please keep that in mind when you add a picture of a person. Clarity sets tags for the events it records, such as which board type was used. Those tags are fixed labels and never contain what you wrote. Microsoft's privacy statement applies to this data. We also use Vercel Analytics and Speed Insights for anonymous page-view and speed statistics, without cookies.

We use these companies to run TokenBoards. Each handles data under its own privacy policy. - Stripe: payments. https://stripe.com/privacy - Supabase: accounts and saved boards. https://supabase.com/privacy - Resend: email. https://resend.com/legal/privacy-policy - Pixabay and GIPHY: photo and GIF search. We send them your search words, not who you are. https://pixabay.com/service/privacy/ and https://support.giphy.com/hc/en-us/articles/360032872931-GIPHY-Privacy-Policy - Microsoft Clarity and Vercel: analytics and hosting. https://privacy.microsoft.com/privacystatement and https://vercel.com/legal/privacy-policy - Your browser's text-to-speech, only in a session where words are said (a core board, or a choice board with sound on): tapped words are said with the device's voice, in the language you chose for them on a two language board. We never receive or record what is said. We use a voice that runs on your device when there is one, but some browsers' voices run on the browser maker's online service, and then the words are sent to it. - YouTube and GIPHY, only if you add a reward video or GIF: when the reward is earned, the viewer's browser loads it directly from them, so they receive technical information such as the IP address. Boards without one never contact them. https://policies.google.com/privacy We may share information if the law requires it, to protect people's safety or our rights, or as part of a sale or transfer of the service.

When you create a share link, the board's contents, including its images, are stored on our servers so the link can display it. Anyone who has the link can view, print and copy the board, so don't share a link to a board that contains private information. Each link keeps a count of how many times it was opened, how many sessions were started from it, and when it was last used. These are counts only. We don't store the IP address, device or name of the person who opened the link. Links you open yourself from the Share window are not counted. Free links stop working after 30 days. Pro links don't expire. If you add a QR code to a printed board, we store the board for it the same way as a share link, plus the date it was last scanned, so a free QR link can stay active for 90 days after its last scan. No scanner's IP address or device is stored. You can delete any of your links, and the board stored for it, at any time from the Share window.

You can install TokenBoards on a device and use it without a connection. To do that, your browser keeps a copy of the app's own files (pages, scripts, fonts and symbols) on your device. These files contain no information about you or your boards. If you are signed in to Pro, boards you open are also copied to your device so they open offline. This copy stays on your device and is removed when you sign out. Share links, sign-in pages and anything from our API are never kept this way.

TokenBoards is for therapists, educators, caregivers and other professionals. It is not directed at children, and we do not knowingly collect personal information from children. Boards often describe children. Please don't put private information about a learner on a board you save to your account, share or email: full names, photos, diagnoses, and school or medical record numbers. A first name or nickname is usually enough. TokenBoards is not designed to hold protected health information or education records. If you tell us a board contains information that shouldn't be there, we will remove it.

- Boards saved on your device: until you delete them or clear your browser's data - Boards saved to your Pro account: until you delete them or ask us to delete your account. If Pro ends, they are kept but hidden, and they come back if you start Pro again. - Share links and their stored boards: until you delete them. Free links stop working after 30 days. - Account details: while your account exists, and as long as the law requires for payment records - Messages you send us: as long as needed to answer you and keep a record - Analytics and recordings: kept by Clarity and Vercel under their own retention periods

We use encrypted connections (HTTPS), keep payment details with Stripe, and check Pro status on our servers instead of in your browser. Share links use random addresses that are hard to guess. No system is perfectly secure, so please use a sign-in link only on a device you trust and sign out on shared computers.

Our service providers may process data in the United States and in other countries. By using TokenBoards you understand your information may be handled in those places.

You can: - Use TokenBoards without an account - Sign out of your account at any time - Delete boards saved to your account from "My Boards", and delete share links from the Share window - Remove the board on a device with "Start fresh", or by clearing your browser's site data - Ask us for a copy of the information we hold about your account - Ask us to correct it, or to delete your account and its saved boards To make a request, email contact@tokenboards.app from the address on your account. We will respond within a reasonable time, and within the time the law sets where it applies to you. Depending on where you live, such as the European Economic Area, the United Kingdom or California, you may have further rights, including to object to or restrict some processing and to complain to a data protection authority. We do not sell your personal information.

We may update this policy. When we do, we will change the date at the top of this page, and if the change is significant we will say so on the site.

Questions about this policy? Contact: contact@tokenboards.app