Privacy Policy

Data we collect

• Account data: your name, email address, interface language and a colour for your cursor. If you set a password, we store only a salted scrypt hash of it, never the password itself.
• Google sign-in: when you choose "Continue with Google", Google sends us your Google account ID, name, email address and whether that address is verified (scopes: openid, email, profile). We do not receive your Google password and get no access to your Gmail, Drive, contacts or any other Google data.
• Content you create: boards, diagrams, comments, uploaded images and files, and the version history of your boards.
• Technical data: active sessions (when they were created and the browser they came from) and server logs with IP addresses and requested pages, used for security and troubleshooting.
• Usage statistics: which first steps your account has taken (made a board, a diagram, invited a colleague, created an API token), on which days it was used, and the site or campaign that brought you here when the link says so (for example utm_source). Visits to the home and sign-in pages are counted without cookies: a visitor is a hash that changes every day, and IP addresses are not stored.

How we use it

• to sign you in and keep you signed in;
• to show your name to the people you work with on a board, and to apply the access rights set in your organization and projects;
• to protect the service from abuse and to fix problems;
• to see which parts of Doska help people get started and improve them. These statistics stay on our server and are not shared with anyone.
• We do not sell your data, show advertising, build marketing profiles or use your data or content to train AI models.

Data from Google

Doska's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is used only to sign you in and to show your name and email inside Doska. It is not transferred to anyone else, not used for advertising, and not read by people except when you ask us for help, for security reasons, or when the law requires it.

Who can see your data

Your boards are visible only to the people your organization and project settings allow. We do not share personal data with third parties. The server is hosted by an infrastructure provider in the European Union, and traffic passes through a content delivery network for protection and speed; they process data only on our behalf.

How long we keep it

We keep your data while your account exists. When an account, board or organization is deleted, its data is removed from the database right away and disappears from backups within 14 days. Server logs are rotated and kept only for a short time.

Security

All traffic is encrypted with HTTPS. Passwords are stored as salted hashes, sessions use secure HTTP-only cookies, and access to every board is checked on the server.

Cookies and local storage

We use one session cookie to keep you signed in and a short-lived cookie that protects the Google sign-in step. Your browser also stores preferences such as theme and language. There are no advertising or tracking cookies and no third-party analytics: our own visit counting uses no cookies.

Your rights

You can see and change your name in Settings and export your boards to a file at any time. You can ask us for a copy of your personal data, to correct it, or to delete your account and all its data; write to the administrator of your organization or the operator of https://getdoska.top and we will answer within 30 days. If you live in the EU, you also have the right to complain to your data protection authority.

Children

Doska is a work tool and is not meant for children under 16.

Changes

If this policy changes, we will update the date at the top of this page.

Contact

Questions about your data: the administrator of your organization or the operator of https://getdoska.top.