← Back to home
LEGAL // PRIVACY

Privacy Notice

How we handle analytics on this website, the bug reports you send us from the ROADS app, and the emails ROADS sends you.

Website analytics

We use Vercel Web Analytics to count visits to this website — which pages are viewed, roughly where visitors are in the world, what device and browser they use, and which site sent them here. We use this only to improve the website.

It sets no cookies and stores nothing on your device. Vercel recognises a visit using a short-lived code that it says is discarded after 24 hours, so we can't identify you, and we don't combine this with anything else. Vercel Inc. processes this data on our behalf.

Opting out: you can switch this off at any time with the link at the bottom of any page. We also respect your browser's “Global Privacy Control” setting and treat it as an opt-out automatically.

This applies to our website only. Inside prjkt.ing's apps, we don't use third-party analytics.

Current Device Status

ON

Bug reports from the ROADS app

When you use “Report an issue” in ROADS, we keep your whole report — its title and description, the page you were on (without anything after a “?” or “#” in the address), your account and the workspace you were in — in our database in London. It is deleted when you delete your account, or 12 months after its last activity. We use bug reports only to support you and to find and fix problems in our service; our lawful basis is our legitimate interest in providing a service that works.

So that we can track and fix the problem, a copy of the title and description is sent to GitHub, the service we use to manage our development work, and from there to our internal team chat, Discord. Both are hosted in the United States. Before the copy leaves, we automatically remove email addresses, phone numbers, NHS numbers, other long numbers, account and project IDs, UK postcodes, and sign-in links, passwords and access keys. The copy never includes your email address, your account or your workspace.

That automatic check can’t recognise names or other details written in ordinary words, so please don’t include personal information — names, emails, or patient or client details — in a report.

GitHub, Inc. processes this copy on our behalf and is certified under the UK Extension to the EU–U.S. Data Privacy Framework. Discord, Inc. participates in the same UK Extension. You can check both on the Data Privacy Framework list. Copies in GitHub and Discord are kept until we delete them.

Emails we send you

When you sign in, are invited to a workspace, or are added to one, we email you a link or a short notice. These emails are sent by MailPace (OhMySMTP Ltd, a company registered in England and Wales), which processes them on our behalf.

MailPace receives your email address and the message, which contains a sign-in or invitation link and never the name of your workspace or anything from your roadmaps. It keeps a copy for up to 30 days, and up to 7 more days in backups, so delivery problems can be investigated. MailPace stores this data in the European Union, which the UK recognises as giving adequate protection.

Our lawful basis is our legitimate interest in providing the service you or your organisation signed up for.