Kaniban
Your data
Privacy
Your boards stay in your browser
Every workspace, column, card, tag, note, timer and image you create is stored in your own browser, under the kanban.v1 key in localStorage (images in IndexedDB). Kaniban does not upload board contents or keep a server copy. We cannot recover your boards if you clear your browser data, which is why Export lives in the rail menu. You can keep an export or use Plus's automatic backup to a folder you choose. Those files contain no licence key or access token. Importing an older file does not activate a licence embedded in it.
What is collected
- Google AdSense — serves the ads that keep the free tier free. Google and its partners may set cookies and use device identifiers to select and measure ads.
- Vercel Web Analytics — page views and in-app events (which views get used, whether onboarding finishes), measured without cookies and without following you between sites. If you answer “What do you do?” during onboarding, that one answer is sent with the event so we know who the app is being built for. It is never linked to a name or an email, and no card content is ever sent.
- Paid licensing — your licence key and, when claiming a gift, the email you enter are sent to Kaniban's API on Vercel. Purchases are verified with Gumroad; gifts are claimed by verifying your email. Turso stores the purchase or gift identifier, associated email, encrypted licence key, tier and expiry, and your chosen browser names, registration timestamps and the days on which each registered browser checked in. We also store hashed verification and session identifiers and request counters to prevent abuse. Vercel receives normal request metadata, including the connecting IP address; our rate-limit records use hashed identifiers. These records verify paid access and enforce the browser limit. Gumroad handles payment; Kaniban does not store payment-card details.
- Licence emails — Resend receives your associated email address and a short-lived verification code to deliver the approval message. Activation confirmations include your tier, browser name and access expiry. Turso keeps delivery records so failed confirmation sends can be retried. No licence keys or board contents are included in these emails. If you email support@kaniban.com, ImprovMX forwards your message to our support inbox.
- Feedback and ratings — the feedback and rating forms inside the app post only what you type (a message, or a star rating and a quote), an optional name, an optional email, and which tier you are on, to our own server. No board contents. Ratings are averaged and the average is shown on the site. A quote is shown only when you tick the permission box. The email is used only to reply.
Browser registrations
No password or account signup is needed. Paid activation asks you to approve the browser using a code sent to the email linked to your licence. A gift is linked to the first recipient who verifies their email. A licence can have up to two named browser profiles. After email verification, you can replace or revoke a registration. Clearing site data or using another browser may require activation again.
Paid access is checked online daily while you use the app. A signed grant stored in your browser allows up to seven days of offline access after verification, or until your pass expires, whichever comes first. Revocation takes effect at the next successful check; an offline browser can keep its existing grant until expiry. Licensing also uses cookies to remember the registered browser and a short-lived email verification request. These cookies contain no board contents and are separate from advertising cookies.
Consent
If you are in the EEA or the UK, AdSense does not load until you accept the banner. Decline and no ad script is ever fetched — the app works exactly the same. Elsewhere it loads by default and you can decline from the same banner. Your choice is kept in localStorage under kanban.consent; clearing your browser data asks you again.
Supporters and Plus pass holders see no ads at all.
Your rights
Your board data is exportable and deletable from inside the app. Clearing site data removes local board data and browser credentials; it does not delete server-side licensing records or files you have exported. Revoking a browser removes its access, not the licence record. To request access, correction or deletion of licensing records, contact support@kaniban.com. For the ad data held by Google, see how Google uses data from sites that use its services, or opt out of personalised ads at My Ad Center. If you are in the EEA or UK you have the right to access, correct, delete and port your data, and to complain to your local data protection authority.
Children
Kaniban is not directed at children under 13, and we do not knowingly collect their data.
Changes and contact
Material changes will be announced in the app before they take effect. Questions, or a request about your data: support@kaniban.com.