Privacy Policy
Last updated: October 2026
This Privacy Policy explains what data ElectroBoard (the "Service") collects, how it is used, and how it is protected.
1. What data we collect
1.1. Account data
When you register via Google OAuth or email and password, we store:
- Email address
- Name (if provided via Google)
- User identifier (UUID)
Passwords are stored in encrypted form by the authentication provider (Supabase Auth). We do not have access to passwords in plain text.
1.2. Project data
Your electrical panel projects (panel structure, devices, parameters, settings) are stored:
- Locally — in your browser's localStorage
- In the cloud — in the Supabase database (PostgreSQL)
Your project data is your property. We do not analyse or share the contents of your projects with third parties.
1.3. Analytics
We use Plausible Analytics — a self-hosted, cookie-free analytics solution. Plausible collects:
- Page view counts
- Country of visit (determined by IP address; the IP itself is not stored)
- Device type (desktop / mobile)
- Referral source
- Aggregated events (project creation, PDF export, etc.)
Plausible does not collect personal data, does not use cookies, and does not track users across sessions. Our Plausible instance is hosted on our own server — data is not shared with third parties.
Learn more about Plausible: plausible.io/privacy-focused-web-analytics
Product event journal. When you work in the constructor with your account, we write short records of successful actions to our database (Supabase): opening the constructor, creating a board, running a check, exporting, sharing, an answer from the AI consultant and similar. A record holds the name of the action, your account identifier, the time, the page type, the interface language, the device class (phone / tablet / desktop), the class of the referring source (for example "search" or "AI") and the country as determined by Cloudflare. Your IP address, page addresses, and the names and contents of your boards are not recorded. The journal uses no cookies and stores nothing on your device. We use these records for overall statistics (how many people use a feature, at which step they stop), never to assess an individual person.
Two optional questions. After you sign in, the constructor offers two questions with ready-made answers once: "Who are you?" and "How did you hear about us?". Answering is optional: choosing "Skip" is remembered and the questions do not come back. The answers are stored only in our database, are not passed to Plausible or to third parties, and are counted only in overall statistics. You can change them at any time in Settings.
How to opt out. In Settings ("Profile" tab, "About you and statistics" block) there is a checkbox "Do not collect my usage statistics". While it is on, the journal records no events of your account.
1.4. Technical data
The web server automatically records:
- IP address (in server logs, stored temporarily)
- Browser User-Agent
- Request timestamp
This data is used exclusively for diagnosing technical issues and ensuring security.
2. How we use data
Collected data is used to:
- provide the functionality of the Service (authentication, project saving, sharing);
- synchronise projects across a user's devices;
- analyse overall usage of the Service (which features are used, where errors occur);
- improve the quality of the Service.
We do not use your data to:
- show advertising;
- sell or transfer to third parties;
- profile or target users (we count usage statistics only in aggregate, never as an assessment of an individual person);
- train artificial intelligence models.
3. Who we share data with
3.1. Supabase
Account and project data is stored in Supabase Cloud (cloud database and authentication). Supabase complies with SOC 2 Type II standards.
Supabase Privacy Policy: supabase.com/privacy
3.2. Cloudflare
Traffic to the Service passes through Cloudflare Tunnel for security and performance.
Cloudflare Privacy Policy: cloudflare.com/privacypolicy
3.3. Google (OAuth only)
If you chose to sign in with Google, we receive your email and name from Google. We do not gain access to your data within Google (contacts, files, etc.).
3.4. Others
We do not share your data with any other third parties, except as required by applicable law.
3.5. Ko-fi (donations)
If you open the support window, a Ko-fi widget (ko-fi.com) loads inside it; it is not loaded before you open the window. Ko-fi is a separate service: what you enter there and the cookies it sets are governed by Ko-fi's privacy policy. We do not receive your payment details.
4. Cookies
The Service uses only technical cookies required for authentication (Supabase Auth session cookies). We do not use advertising, analytics, or tracking cookies.
5. Data retention
- Account data — retained until account deletion
- Project data — retained until deleted by the user or upon account deletion
- Server logs — retained for up to 30 days
- Plausible analytics — aggregated data without personal information, retained indefinitely
- Product event journal — detailed records are deleted automatically after 90 days or together with the account. Only aggregate counts without a user identifier are kept longer (groups of fewer than 10 people are merged); they remain after an account is deleted
- Answers to the two questions and the statistics setting — retained until account deletion
6. Security
We take reasonable measures to protect data:
- HTTPS for all connections
- Row Level Security (RLS) in the database — each user can only access their own projects
- Encrypted password storage
- Minimal data collection
However, no system is completely secure. We cannot guarantee the absolute security of your data.
7. Your rights
You have the right to:
- Access your data — all your projects are available in the Service
- Delete your projects — via the Service interface
- Delete your account — contact us via GitHub Issues (automated deletion will be added in the future)
- Export your data — via the PDF export feature
- Object to the collection of usage statistics — with the "Do not collect my usage statistics" checkbox in Settings
- Change or clear your answers to the two questions — in Settings
8. Children
The Service is not intended for persons under the age of 16. We do not knowingly collect data from children.
9. Policy changes
We may update this Policy. The date of the last update is shown at the top of this document. Continued use of the Service after an update constitutes acceptance of the revised Policy.
10. Contact
For privacy-related enquiries, please reach out via Telegram (contact details in BIO): eBoard_UA
ElectroBoard respects your privacy. We collect the minimum data necessary to operate the Service and do not use it for advertising or sale.