Split-Flap

What an account stores

Split-Flap works without an account. If you make one, this is everything it keeps, why, and how to take it back.

Without an account: Your boards are kept in this browser's storage and nowhere else. A board link carries a board in the part of the address after #, which browsers never send to a server.
With an account: If you sign in with Google, Split-Flap stores your Google account id, your name (the app shows only the first name), your email address, your boards and playlists, and Home and your default look. It does not store your IP address, your browser details, your profile picture or any of Google's sign-in tokens. While you are signed in, your browser holds a sign-in cookie that is only sent to Split-Flap's own server. It is needed for the account to work, so it is not something to consent to.
Your own sources: If you add a source of your own, such as an Alpha Vantage key or a published sheet, it is kept in this browser, and with your account if you are signed in. On the server it is encrypted, so a copy of the database cannot read it. In the browser it is stored as you typed it, until you remove it or sign out. It is never put in a board, a board link or the account export. A feed you add for Headlines is kept the same way, and Split-Flap's server fetches that feed for the screens that show it.
Latest live data: The latest departures, weather, prices and headlines are kept in this browser, with or without an account, so a screen that restarts without a connection can show them. Signing out removes them.
The microphone: The Music meter and the Music light can listen to the room. The microphone is used only after you press Listen, and only until you press Stop or leave the page. The sound is analysed in this browser into a few levels and is never sent anywhere or stored. Stop turns the microphone off.
How the app is used: To see what people use, where they get stuck and what to improve, the app counts what happens on it: which screens are opened, which templates and looks are picked, which presses fail, and errors. Each count comes with the kind of screen (phone, tablet, desktop or wall), the language, the version, whether this browser has been here before, and the country, which Cloudflare works out from the connection. Nothing in a count says who you are: there is no id, no cookie and no IP address in it, and nothing you type is sent. The counts are kept by Cloudflare in Workers Analytics Engine for up to three months.
Home and your default look: Home is the city, stops and currency you set under Account, which new tiles start from. Your default look is the look new boards start as. As a guest both are kept in this browser. With an account they are kept with the account, together with which playlist you last put on a screen and when, so a new device can offer it. What each screen shows is kept in that screen's browser only.
Why: To keep your boards and bring them back on any device you sign in on. The legal basis is the service itself: you asked for your boards to be kept. The counts of how the app is used are there to improve it; they say nothing about who you are.
Where: On Cloudflare, in a database kept in the European Union. Cloudflare hosts the site and, like any host, logs requests for a short time to run and protect it.
Who else: Google, for signing in only. Split-Flap does not call Google again after you have signed in. There are no adverts, and nothing that follows you from site to site.
How long: Until you delete a board or your account. Deleting the account removes it, its sessions and every board in it straight away. Boards saved before version 0.10.1 are also kept in their earlier form, so the change can be undone, until at least two weeks after version 0.11.3 first reaches your account or, without an account, this browser. They are removed on the first visit after that.
Your data: In the editor, Account has Export my account, which downloads your account and boards as one file, and Delete account. You can also email me for a copy, a correction or a deletion.
Who is responsible: Matthew MacLaine, Stockholm, Sweden, matthew@maclaine.se. If you think your data has been handled wrongly, you can also complain to the Swedish Authority for Privacy Protection (IMY).