Privacy Policy

Last updated: June 2026

1. Introduction

Welcome to To-Deck. We are committed to protecting your privacy and ensuring you understand how your data is handled. This Privacy Policy explains our practices regarding the collection, use, and disclosure of your information.

Data Controller: To-Deck
For privacy-related inquiries, please contact us at info@lasintesi.org.

2. Information We Collect

In accordance with data minimization principles, we only collect what is strictly necessary to provide our service:

• Account Information: We collect a self-selected "username" and a password to authenticate your access. We do not collect personally identifiable information such as your real name or email address.
• Service Data: We store the content of the tasks you create, their completion status, and their ordering to sync them across your devices.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), the legal bases we rely on for processing this information are:

• Contractual Necessity: To provide you with the To-Deck service, maintain your account, and sync your tasks.
• Consent: For the placement of cookies by our advertising partners (see section 7).

4. Data Storage and Localization

Your data is securely stored and processed using trusted cloud infrastructure providers, specifically Vercel and Supabase. Because these are global services, your data may be transferred to and processed in data centers located in the United States, Europe, or other regions. By using the Service, you consent to this transfer and processing.

5. Data Retention

Your data is retained only for as long as your account is active. You have full control over your data. If you choose to delete your account using the "Delete Account" feature within the application, all your associated tasks and account information will be permanently and irreversibly erased from our databases immediately.

6. Information Sharing

We do not sell, rent, or trade your data. Your data is only shared with our trusted infrastructure providers (Vercel and Supabase) exclusively for the purpose of operating the application. These providers are bound by strict data processing agreements to ensure your data remains secure.

7. Cookies and Advertising

We use Google AdSense to display advertisements, which helps keep our service free. Google AdSense uses cookies to serve ads based on your prior visits to our website or other websites.

If you are located in the European Economic Area (EEA) or the UK, we rely on your explicit consent to serve personalized ads and drop non-essential cookies. You can manage or revoke your consent at any time via the privacy settings prompt provided on our website, or by adjusting your Google account ad settings.

8. Children's Privacy

Our Service is not directed to anyone under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are under these age limits, please do not use the Service.

9. Your Data Protection Rights (GDPR & CCPA/CPRA)

Depending on your location, including if you are a resident of the EEA, UK, or California, you have specific data protection rights:

• The right to access: You can view all your data directly within the To-Deck app.
• The right to rectification: You can edit your tasks at any time.
• The right to erasure ("Right to be Forgotten"): You can instantly delete all your data using the "Delete Account" button in the settings.
• The right to restrict processing and data portability.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

If you wish to exercise any of these rights beyond what the application interface provides, please contact us at info@lasintesi.org.