cnvs.app privacy & data

Board security data: the board ID, lock mode, and a salted one-way hash of an optional access key.

Support submissions: information you choose to send through the feedback form or support email.

Coarse product events cover creating a board, copying a board's share link, opening the todo landing page, switching board mode, and creating a column or creating/moving a task.

approximate location derived from network information

browser, device and operating-system details

Operational connection data: Cloudflare and our service may process IP address, request headers, timing, and security/rate-limit signals needed to deliver and protect the service.

Board content: drawings, text, links, images, diagrams, columns, tasks, coordinates, item IDs, author labels, and timestamps supplied by collaborators or MCP/API clients.

We use board and connection data to synchronize collaborators, render previews and exports, execute requested MCP/API operations, enforce quotas and access locks, prevent abuse, diagnose failures, and maintain the service.

Aggregate analytics helps us understand basic feature usage.

When you ask support for help, connection data from short-lived service logs (kept about 7 days) may be used to help locate your boards.

Boards are retained for up to 30 days of inactivity .

The deleted ID remains tombstoned for 30 days so stale links show an erased state.

connection data from short-lived service logs (kept about 7 days)

currently up to 7 days on Workers Free or 30 days on Workers Paid

sets a first-party cnvs_created cookie for at most 60 seconds

Service providers process limited data on our behalf: Cloudflare provides edge delivery, Workers, Durable Objects, D1 storage, security, and rate limiting. Google Analytics provides aggregate page and coarse product-usage measurement. Coder AI feedback service receives support information you intentionally submit.

Holding the delete control removes a board's content from the live service.

We do not use board content to train AI models, sell personal data, build advertising profiles, or run a public board directory.