Privacy Policy

In short

The constellation board works without an account, without an email address and without cookies. When you work alone, your board stays in your browser. When you share it live, it runs through our server in Frankfurt and is held there in memory only. Visitor statistics and load-time measurement store nothing on your device. We serve the fonts and icons of the drawing canvas ourselves. Only a small licence-check image is loaded from tldraw, the company that makes the canvas.

This policy covers onlineconstellationboard.com and digitales-systembrett.de. The German version is the binding one.

Controller

metaFox GmbH, Carl-Spitzweg-Str. 61, 90768 Fürth, Germany

Register court: Amtsgericht Fürth, HRB 19366. Managing directors: Maximilian Friedle, Tobias Weghorn.

Privacy questions: tobias@metafox.eu

The board on your device

When you work alone, your browser keeps the board in its own storage (IndexedDB), so it is still there after a reload. The drawing canvas keeps its settings in local storage, such as a random ID and a colour. We also note there whether you closed the hint on the board. None of this is sent to us.

You can delete this data at any time by clearing this site’s data in your browser. Your board is then gone too.

Live rooms

When you open a live room, your browser sends the board to our rooms server. Anyone with the link can see the board and change it. What runs through the server: the board’s content (figures and their names, positions, lines, rings and groups), the name you give yourself on the board, your pointer position, and the viewing direction when someone opens the first-person view.

Your browser keeps your name on the board and a random ID in session storage while the tab is open. Whoever opened the room also gets a key there that can end the room.

The rooms server runs at Fly.io in Frankfurt and holds rooms in memory only. Nothing is written to a database, and we do not look at what is in the rooms.

When the person who opened a room ends it, we delete it at once. Otherwise it closes by itself: after ten minutes with nobody connected, after two hours without a change, and at the latest twelve hours after it was opened. We then keep its last state in memory for up to 24 hours, so the link can reopen the room. After that it is deleted. When the server restarts, for example for an update, all rooms are deleted at once.

So that nobody floods the server with rooms or connections, we count both per IP address. These counters live in memory only and are discarded after 24 hours at the latest.

The legal basis is Art. 6(1)(b) GDPR, because we provide the room you open. For protection against abuse it is Art. 6(1)(f) GDPR, our legitimate interest in running the service securely.

If you are a coach and put details about clients on the board, it is your responsibility that you may do so. Use first names or roles rather than full names.

Server logs

When you load a page, our host Vercel processes technical data such as your IP address, the address requested, the time and your browser’s user agent. Vercel needs this to deliver the pages and to fend off attacks.

The rooms server writes technical logs, for example when a room was opened and closed, with the room ID. If very many connections come from one IP address, that IP address appears in the log. The rooms server’s logs go to Better Stack, our service for server logs.

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in a stable and secure service.

Licence check of the drawing canvas (tldraw)

The board’s drawing canvas is made by tldraw. We serve its fonts, icons and translations from this website. When you start the board, though, the canvas requests a small image from cdn.tldraw.com, which tldraw has it request when it runs without a licence key. tldraw receives your IP address, your browser’s user agent and the address of this website without the path. Nothing on your board goes to tldraw.

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in being able to use the drawing canvas.

Provider: tldraw Inc., USA. The image is delivered by Cloudflare’s network. Privacy policy: https://www.tldraw.com/privacy.html

Visitor statistics (PostHog)

We count visits to this site with PostHog, so we can see which pages are read and which links to metaFox.online are clicked. PostHog stores nothing on your device: no cookies, no local storage, no session storage. Each page load gets a random ID that is gone as soon as you reload or leave the page, so we cannot recognise you on a later visit. We do not create profiles of individual people.

With each page view PostHog receives the page address, the referring page, the campaign labels in the link that brought you here (utm parameters), your browser, device type and screen size, and your IP address, from which it derives an approximate location (country and city). On a live room, we remove the room ID from these addresses before they are sent. We do not connect this data to your name or email address.

Data is sent only to PostHog Cloud EU (https://eu.i.posthog.com), on servers in Frankfurt. The legal basis is our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR). PostHog processes the data on our behalf under a data processing agreement.

Provider: PostHog Inc. Privacy policy: https://posthog.com/privacy · DPA: https://posthog.com/dpa

Load times (Vercel Speed Insights)

We measure how fast the pages load with Vercel Speed Insights. It sends load-time measurements, the page address, the device type and an approximate region. It sets no cookies and assigns no lasting ID. On a live room, we remove the room ID from the page address before it is sent.

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in pages that load quickly.

Explainer video

The video on the home page only loads when you press play. Your browser then loads it from www.metafox.online, and metaFox.online processes your IP address and user agent to deliver it. See the metaFox.online privacy policy: https://www.metafox.online/en/legal/privacy-policy

Links to metaFox.online

Links to metaFox.online carry campaign labels (utm parameters), which tell metaFox.online which part of this site you came from. Your board and anything you typed do not go along. What happens on metaFox.online is covered by its own privacy policy.

Storage on your device

We set no cookies. The entries in IndexedDB, local storage and session storage described above are strictly necessary for the board to work the way you ask it to (§ 25(2) no. 2 TDDDG, the German telecommunications and digital services data protection act). No consent is needed for them. Visitor statistics and load-time measurement store nothing on your device.

Recipients

Processing data on our behalf: Vercel Inc. (website hosting and Speed Insights), Fly.io, Inc. (rooms server in Frankfurt), PostHog Inc. (visitor statistics in the EU) and Better Stack (rooms server logs). tldraw Inc. receives the connection data described above when the drawing canvas loads. We do not sell data or pass it on for advertising.

Transfers outside the EU

Vercel, Fly.io, PostHog and tldraw are US companies. Vercel delivers the pages from data centres near you. This website’s server functions currently run at Vercel in the Washington, D.C. region (USA). Vercel and Fly.io are certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). We run the rooms server in Frankfurt, and the visitor statistics are stored in Frankfurt.

How long we keep data

The board in your browser stays until you delete it. We delete live rooms 24 hours after they close at the latest, as described above. We discard the per-IP counters after 24 hours at the latest. We keep visitor statistics and server logs according to the retention periods set in our PostHog, Vercel and Better Stack accounts, and no longer than we need them for the purposes above.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on our legitimate interest (Art. 21). Write to us at tobias@metafox.eu.

Because you have no account here and we store no names, we usually cannot link data to a person. We can then only answer a request if you give us details that let us find you in the data (Art. 11 GDPR).

Complaints to a supervisory authority

You can complain to a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, https://www.lda.bayern.de

Changes

When the website or the services it uses change, we update this policy. The version on this page applies.