OpenBoard privacy policy

Effective date: 24 July 2026

OpenBoard is operated by Bite Technologies Ltd, UK company number 16023140, of 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX ("we", "us"). This policy explains how the OpenBoard browser extension handles information.

What OpenBoard collects

• Account information: your email address, authentication identifiers, session records, and the public handle you choose.
• Public content: comments, replies, votes, and any links or media URLs included in a comment.
• Page context: the normalized URL, domain, and cryptographic URL hash needed to place users on the same board. Tracking parameters are removed where supported.
• Safety records: reports, report reasons, moderation state, and minimal rate-limit events.
• Local preferences: theme, launcher position, muted state, hidden sites, and session data stored by the browser extension.
• Operational information: infrastructure may process IP address, user agent, timestamps, request status, and security logs to deliver and protect the service.

How we use information

We process this information to authenticate users, provide shared page discussions, display public handles and contributions, operate voting and reporting, prevent abuse, maintain security, troubleshoot failures, and comply with legal obligations. We do not sell personal data and do not use advertising or cross-site tracking SDKs.

Public information

Your handle, comments, replies, and vote totals are visible to anyone who opens the same public board. Do not post confidential information. Reports and authentication details are not public.

Service providers

• Supabase: database hosting, authentication, Edge Functions, security controls, and authentication-email delivery.
• GIPHY: optional GIF/sticker search queries are proxied through the OpenBoard backend. Browsing a result does not publish it.
• Browser stores and browser vendors: distribute and update the extension under their own privacy policies.

Providers may process data outside your country using their applicable safeguards.

Legal bases

Where UK or EU data-protection law applies, processing is based on performance of the service you request, our legitimate interests in operating and securing OpenBoard, consent where required, and compliance with legal obligations.

Retention

Account and profile data is retained while the account exists. Public comments remain until deleted or moderated. When you delete your account, linked account data is deleted and preserved comments are anonymized as [deleted]. Safety and operational records are retained only as long as reasonably necessary for abuse prevention, security, legal compliance, and dispute handling.

Account deletion

You can permanently delete your account from the extension popup. Open Delete account, type DELETE, and confirm. The authenticated account, profile, votes, reports, and rate records are removed. Existing discussion text is preserved with ownership and stored handle removed so the conversation remains coherent.

Your rights

Depending on your location, you may have rights to access, correct, erase, restrict, object to, or receive a copy of personal data, and to complain to a data-protection authority. In the UK, the supervisory authority is the Information Commissioner's Office.

Children

OpenBoard is not directed to children under 13. Users below the age at which they can consent to online services in their country should use OpenBoard only with authorization from a parent or guardian.

Security

We use authenticated server-side authorization, restricted database access, rate limits, and least-privilege extension packaging. No method of transmission or storage is completely secure, so do not place sensitive information in public comments.

Policy changes

We may update this policy when the service, providers, or legal requirements change. The effective date above will be updated and material changes will be communicated where required.

Contact

See the OpenBoard support page. Privacy requests may also be sent by post to Bite Technologies Ltd, 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX.