Privacy policy

The data controller is Delisou Services — rue des Petites Bruyères 58, 4032 Chênée (Belgium). Company number: BE 0872.036.037.

For any question about your data: contact@webboard.me.

• Account: your email address and password (hashed — never readable by us).
• Content: your desktops, bookmarks, notes, to-do lists, widgets and background images.
• Technical: sign-in and error logs (IP address, date, action), kept for security and diagnostics.
• Payment: if you subscribe, only a Stripe customer ID is stored. We never see or store your card details.

Your sensitive content (bookmark URLs and names, desktop names, your email) is encrypted in the database (AES-256). Passwords are hashed with bcrypt. All traffic uses HTTPS.

• No advertising, no ad trackers.
• No selling or sharing of your data for commercial purposes.
• No profiling, no analysis of your bookmark content.

We only use strictly necessary cookies: the session (to keep you signed in), the "remember me" cookie if you choose it, and your language preference. No advertising cookies, no third-party tracking cookies.

Visit statistics are anonymous and cookieless.

The WebBoard extension (Chrome, Edge, Firefox) works as follows:

• It stores an authentication token and your last used desktop locally in your browser.
• It communicates only with webboard.me, and only when you save a bookmark or open a new tab.
• It then sends the URL and title of the page you choose to save, plus its icon.
• For the new tab page search, it downloads your own bookmark list and keeps it locally in your browser. Bookmarks on password-protected boards are excluded.
• It does not read your history, does not analyse your browsing, collects no analytics and sends nothing to third parties.

• OVH (Belgium/France) — website hosting and email service.
• Stripe — secure payment processing.

No other third party receives your data.

Under the GDPR, you can at any time:

• Access and export your data — directly in the app (profile menu → "Export my data"), as HTML and JSON.
• Correct your information from your account.
• Delete your account and all your data (profile menu → My account). Deletion is permanent.
• Object to processing, or lodge a complaint with the Belgian Data Protection Authority.

Your content is kept as long as your account exists. Technical logs are purged automatically after a few weeks. When you delete your account, your data is erased.

This policy may change; the version in force is the one published on this page. For any significant change, we will notify you by email.