Your Data
OwlBoard logs the IP addresses of its users, this is done on the basis of legitimate interest to ensure the security of the platform and to protect all users from malicious activity. See Data Sharing for details on how we may share this data.
With the exception of sending emails, all data is held - and always remains within - the United Kingdom.
Telemetry
If you opt-in to Telemetry, you will share your IP address and information about the type of device and software you're using to access the service. This data is anonymised and cannot be traced back to any individual. You can opt-in or opt-out in your Settings. All of the anonymised data can be viewed at: liwan.fjla.uk at any time.
All of the data that is stored is held within the United Kingdom.
Telemetry data is used to identify which areas of the webapp are used most frequently and where improvements need to be made.
Registering
If you register, your email address will be used to verify that you work for an organisation that is permitted to access staff data on the service. An activation email will be sent before your email address is anonymised. For example, if your email address is hello@owlboard.info, it will be anonymized to @owlboard.info.
OwlBoard emails are sent using Proton Mail, a privacy-first email service based in Switzerland. To facilitate this, your email address will be securely sent to Proton Mail securely.
You will be assigned a unique identifier which will be stored alongside your anonymised email address as well as in your browser. This is how the service verifies that you are authorised to access staff data.
Data Sharing
OwlBoard utilises CrowdSec, a security service that helps to protect the platform from malicious activity. As part of its operation, CrowdSec analyzes IP addresses and may share certain information with its community of users to identify and mitigate security threats. If your IP address is identified as part of a security incident or threat, it may be shared with CrowdSec's network for further analysis and to prevent malicious activity. This sharing of IP addresses is done under the legitimate interest basis for ensuring the security of the platform and protecting all users from malicious activity.
CrowdSec anonymizes and processes data in accordance with its own privacy policy, which is available for review here. We recommend reviewing their policy to understand how they handle any data collected.