Privacy Policy
This Privacy Policy describes how Logbook ("we", "us", or "our") collects, uses, and shares information when you use our service and the Logbook application (collectively, the "Service").
1. Information we collect
Information you provide
- Account information — your email address and password (stored as a hashed value; we never store plaintext passwords).
- Content you create — spaces, logs, entries, and any notes or field values you add.
Information collected automatically
- Log data — server access logs including your IP address, browser type, and pages visited. Logs are retained for up to 30 days for security and debugging.
- Authentication tokens — a JWT stored in your browser's local storage to keep you signed in across sessions.
2. How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service.
- Authenticate your identity and protect your account.
- Respond to support inquiries.
- Detect and prevent fraud, abuse, or security incidents.
We do not use your data for advertising, and we do not sell it to third parties.
3. Data storage and security
Your data is stored on servers we control. We use reasonable technical and organizational safeguards, including:
- TLS/HTTPS for all data in transit.
- Passwords hashed using bcrypt.
- Regular security patches and updates.
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
4. Data sharing
We do not sell, trade, or rent your personal information. We may share information in limited circumstances:
- Within your space — members of a shared space can see logs and entries created by other members, including the author's name. This is core to the shared-space feature.
- Legal requirements — if required by law, court order, or governmental authority.
- Infrastructure providers — our hosting provider has access to the server as necessary to operate the infrastructure.
5. Data retention
We retain your account data for as long as your account is active. You may delete your account at any time from account settings, which permanently deletes all your personal data and any spaces you own. Server logs are retained for up to 30 days.
6. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data.
To exercise these rights, contact us at the address below.
7. Children's privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.
9. Contact
If you have questions about this Privacy Policy, please contact us at: [email protected]