VENOM/BOARD
Sign in Open web app

Privacy policy

Last updated: 7 October 2026

Venom Board is made and run by 1337VIPER ("we", "us"). This page explains what venomboard.com and the Venom Board apps collect, why, and what you can do about it. Questions or requests: [email protected].

The short version

  • Boards on your computer stay on your computer. We never see them unless you share one with a team.
  • Team accounts keep what's needed to run them: your email, username, display name, password (scrambled so nobody can read it) and the team projects you work on.
  • No ads, no analytics, no tracking. We don't sell or rent your data.
  • You can delete your account at any time from Settings.

What we collect, and why

Your account

  • Email address, username, display name and cursor colour: to sign you in, show you to teammates and send account emails.
  • Password: stored only as a one-way hash (scrypt). We can't read it.
  • Two-step sign-in, if you turn it on: the secret for your authenticator app, and your recovery codes as one-way hashes.
  • Sign-in sessions: so you stay signed in, and so you can see and end your other sign-ins.
  • Email settings and your time zone: so mention emails and the morning reminder of tasks due soon respect your choices and arrive in your morning.

Team projects (only when you use teams)

  • Teams, members, roles and invites (by username or email).
  • The boards you share with a team: cards, notes, connectors, frames, ink, comments, mentions, assignments, pictures you upload, version history, and a short activity history.
  • A preview picture of a board, when it has a view-only link or a public roadmap.
  • A team's Discord webhook address, if a team admin adds one. Those posts then go to Discord.
  • Votes on public roadmaps: we store a scrambled code made from the voter's network address, never the address itself, so each network can vote once per card.
  • Reports about shared boards or roadmaps: the reason someone gives.

Keeping the service safe

  • Network (IP) addresses are used, briefly and in memory, to slow down password guessing, spam and abuse. Our hosting and network providers (below) also see them while delivering the service.

What's public

Nothing is public unless a team admin makes it so:

  • View-only links let anyone who has the link watch that board live. They can't see who's on it or change anything.
  • Public roadmaps are web pages anyone can visit, and search engines may list them if the team allows it. They show phases, card titles and (if chosen) descriptions, milestone dates and vote counts. They never show pictures, comments, people or estimates.
  • Turning a link or roadmap off makes it stop working straight away.

Who helps us run it

  • Hetzner (Germany): our servers and backups.
  • Cloudflare: network delivery and protection for venomboard.com.
  • Fasthosts (UK): sending emails.
  • GitHub: hosting the desktop app downloads. Installed desktop apps check GitHub for updates.
  • Google Fonts: the website and app load their fonts from Google, which sees your network address when they do.
  • YouTube and Vimeo: only if you play a video someone added to a board. Nothing loads from them until you click.

They only get what they need to do their part. Some of them are outside the UK; where that happens, the transfer is covered by the safeguards UK data protection law requires.

Why we're allowed to use it (UK GDPR)

  • To provide the service you signed up for (your account and team projects).
  • Our legitimate interest in keeping the service secure and free of abuse.
  • Notification emails are part of the service, and every one can be turned off from Settings or from a link in the email.

How long we keep it

  • Your account and team data: until you delete them.
  • Notifications: your latest 200. Activity: a project's latest 500 entries. Version history: thinned out by age as described in the app.
  • Backups: up to 14 days, so deleted data is fully gone within about two weeks.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing [email protected]. You can delete your account yourself in Settings → Account → Delete account. Comments you wrote in other people's projects stay there without your name. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).

Cookies

The website uses two cookies, both needed for signing in: vb_session keeps you signed in, and vb_device remembers a device you've signed in from, so that sign-in protection doesn't block you. There are no advertising or analytics cookies.

Children

Venom Board isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll say so on this page and, for big changes, by email.