Privacy policy

Data controller

The publisher of nailboard.art, a private individual acting on a personal, non-professional basis (see the legal notice). Contact for any question about your data: contact@nailboard.art.

Data we process

• Without an account: your boards, notes, designs and photos stay on your device, in your browser’s local storage. Nothing is sent to our servers until you share a board.
• Shared link: the shared board (project name, shape, length, notes, designs and cropped photos) is copied to our servers so that anyone with the link can view it. The link contains a random identifier that cannot be guessed and the page is hidden from search engines, but it is accessible without signing in: only share what you are happy to make visible.
• Account: your e-mail address and, if you sign in with Google, the name and profile picture provided by Google. E-mail sign-in relies on a single-use link valid for 24 hours; a session identifier is then kept in a cookie.
• Cloud backup: while you are signed in, your boards (content, notes, designs, cropped photos) are saved on our servers and linked to your account so you can find them on your other devices. Original photos never leave the device they were imported on.
• Audience measurement: Vercel Web Analytics counts visits without cookies. A temporary identifier is derived from the request and discarded after 24 hours; only aggregated statistics are kept (page viewed, referring site, approximate country and city, browser, operating system and device type).
• Technical logs: IP address and request information processed by the host for security and to keep the service running, kept for a limited time.

Purposes and legal bases

• Providing the service you request (performance of a contract): composing boards, shared links, account creation, sign-in and cloud backup.
• Keeping the service secure and preventing abuse (legitimate interest).
• Measuring traffic anonymously to improve the site (legitimate interest).
• Answering your requests and meeting our legal obligations, for example handling a report (legal obligation and legitimate interest).

Retention

• Account and backed-up boards: for as long as your account exists. You can delete a board from the app (its cloud copy is deleted too) and ask for your account to be deleted by writing to contact@nailboard.art.
• Shared links: until their author deletes them from their account, or on request to contact@nailboard.art.
• E-mail sign-in links: 24 hours. Sign-in session: 60 days of inactivity.
• Traffic statistics: kept in aggregated form only; the visit identifier is discarded after 24 hours.
• The host’s technical logs: a few weeks at most.

Hosting, processors and transfers

Your data is processed by the following providers, acting on our instructions:

• Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, États-Unis): site hosting, server-side functions running in Francfort, Allemagne (région fra1), storage of cropped photos (Vercel Blob (Vercel Inc.), Francfort, Allemagne (région fra1)) and audience measurement.
• Neon, LLC (groupe Databricks, Inc.) (États-Unis): database for accounts, backed-up boards and shared links (photos excluded), hosted in the Union européenne, AWS eu-central-1 (Francfort, Allemagne).
• Resend (Plus Five Five, Inc.) (2261 Market Street #5039, San Francisco, CA 94114, États-Unis): delivery of sign-in e-mails; your address and the e-mail content pass through its servers.
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irlande): only if you choose to sign in with Google, under Google’s privacy policy.

Accounts, boards and shared links are stored in the European Union. Some providers are established in the United States: the resulting transfers are covered by the EU–US Data Privacy Framework where the provider is certified, and otherwise by the European Commission’s standard contractual clauses. Your data is never sold, passed on or used for advertising.

Security

Exchanges with the site are encrypted (HTTPS). Sign-in links are single-use and stored hashed, database access is restricted and shared links use a random identifier. No system is infallible, so choose carefully the photos you import and share.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to give instructions about your data after your death. You can delete your boards yourself from the app and, if you have an account, your shared links from your account. For any other request, write to contact@nailboard.art; we answer within one month. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Cookies

Only cookies strictly necessary for the site to work are used, which do not require consent: the chosen language and the sign-in session (session identifier, protection against request forgery). No advertising, tracking or third-party cookie is set, and audience measurement uses no cookies.

Minors

The service is intended for people aged 15 and over. Imported photos must show your own hands or images you hold the rights to.

Changes

This policy may change; the date of the last update is shown at the top of the page. Significant changes will be announced in the app.