Join

Kanban Project Management Tool

Privacy Policy

1. Data Controller

Angelo Pietsch
Haydnstraße 45
02708 Löbau
Germany
Email: apietsch94@gmail.com

2. Overview of Processing

Join is a Kanban board created as a learning and portfolio project. Personal data is processed to provide accounts, the shared board and contacts, and to turn stakeholder requests into tickets (Issue Collector). No cookies, tracking or analytics tools are used.

3. Hosting of the Website

The website is hosted on GitHub Pages. When you open a page, GitHub processes technically necessary data, in particular your IP address, the time of access and the requested page, to deliver the website and protect it against attacks.

Provider: GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. GitHub is certified under the EU-U.S. Data Privacy Framework.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).

4. Firebase (Login and Database)

Login and data storage use Firebase Authentication and the Firebase Realtime Database by Google. The Firebase program code is loaded from Google's server gstatic.com, which transmits your IP address to Google.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Database location: Belgium (europe-west1). It cannot be ruled out that data is also processed outside the EU; Google uses EU Standard Contractual Clauses as a safeguard.

5. Registration and Login

When you register, your name, email address and password are processed by Firebase Authentication. The password is stored only as a cryptographic hash by Google, never in plain text. Your name and email address are also added to the shared contact list.

After login, Firebase keeps a login token in the browser's sessionStorage. It is deleted when you close the tab. This is not a cookie.

Guest login: Firebase creates an anonymous account without name or email address.

Legal basis: Art. 6(1)(b) GDPR (providing the service you signed up for).

6. Use of the App (Contacts and Tasks)

While using the app, the following data is stored in the Firebase Realtime Database:

Contacts: name, email address, phone number

Tasks: title, description, due date, priority, category, subtasks, assigned contacts and the creator (name, email address, whether they are a team member or an external stakeholder)

All of this data is visible to every logged-in user, including guests (one shared board).

Legal basis: Art. 6(1)(b) GDPR.

7. Stakeholder Requests (Issue Collector)

Stakeholders can send a request through the request form or by email to the Join inbox. We process your name, email address, subject and message, and the content of any email you send.

The form sends your data to our automation server (n8n), which forwards it as an email to the Join inbox. An automated workflow then reads the email, has it analysed by an AI service (Google Gemini) to determine category, title, summary, priority and deadline, and creates a ticket on the board with your name and email address as its creator. You receive a confirmation email, and later an email whenever the team moves your ticket to another column.

Only the number of requests per day is stored publicly (for the daily limit shown on the request page), without any personal data.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in handling your request).

8. Service Providers for the Issue Collector

  • Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — server for the automation software n8n, located in Germany
  • Google Gmail (Google Ireland Limited) — Join inbox; sending confirmation and status emails
  • Google Gemini API (Google Ireland Limited) — AI analysis of the request. Under Google's terms for the free tier, Google may use submitted content to improve its services, and human reviewers may read it. Please do not include sensitive information in your request.

9. No Cookies, No Tracking

This app does not use cookies, analytics tools (e.g. Google Analytics), or tracking. Fonts and icons are hosted with the website; there is no connection to Google Fonts or similar services.

10. Storage Duration

Accounts, contacts and tasks are stored until they are deleted in the app or on request. Request emails remain in the Join inbox until they are deleted manually. The automation server keeps the data of each workflow run for at most 14 days for troubleshooting and deletes it automatically.

11. Rights of Data Subjects

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise these rights, contact: apietsch94@gmail.com

12. Data Security

All data is transmitted encrypted via HTTPS.

Firebase Security Rules only allow logged-in users (including guests) to read and write contacts and tasks. Within the app there is no separation between users: everyone works on the same shared board. This is a deliberate design decision for this demo project.

13. Changes to this Privacy Policy

I reserve the right to update this privacy policy as the app's functionality changes.

Last updated: 14.10.2026