Privacy
This page says what p2pDashboard stores about you, why, and for how long.
Who is responsible
Juergen, juesem.web@pm.me
What is stored
| Data | Why | How long |
|---|---|---|
| Your e-mail address, your name if you gave one, your language and currency, your password (as a hash only), the secret of your authenticator app (encrypted) and the hashes of your recovery codes. | To sign you in and to write to you. | Until you delete your account. |
| Your platforms and their bookings (date, type, amount, change of the invested capital, the text and the reference from the export), your portfolios, your tax settings and the totals the app derives from them. | To show you your figures. | Until you delete the platform or your account. |
| A record of every import: the file's name, the number of rows and the time. | To follow your imports and to show how recent a platform is. | Until you delete your account. |
| Example rows of booking types the app did not recognise. | To show them to you. | Until you discard them or delete your account. |
| The file you upload. | To import it. | Only while it is read; it is deleted afterwards. |
| Your sessions (a hash of the cookie's value and times). | To keep you signed in. | 30 minutes without use, 12 hours at most. |
| Sign-in attempts with the network address they came from. | To stop password guessing. | 7 days. |
| Invitations and the links in mails (address, expiry). | Registration, a new password, a change of address. | Until 30 days after they expire, or until they are used. |
| A record of administrative and security events: who, what, when, never the content. | Traceability. | 1 year. |
| Server logs, without addresses, amounts or platform names. | Finding faults. | 14 days. |
| Database backups made by the hosting provider. | Restoring after a failure. | As long as the provider keeps them. |
Cookies
The app sets one cookie, for your session. It is needed to sign in. There is no analysis, no advertising and no call to other sites.
Who sees your data
Nobody but you. Your data is not passed on. It is stored on a server of Uberspace, the hosting provider, which processes it on our behalf.
Your rights
You can download all your data and delete your account yourself, in the account menu at the top right (Export my data, Delete account). To correct, restrict or object, or for anything else, write to the address above.