Privacy Policy

Who we are

When this policy says "we," "us," or "our," it refers to the operator of Surfboard in connection with the website at https://surfboard.bandprotocol.com.

What we collect

We do not run a broad, standalone "data collection" program unrelated to running Surfboard. Depending on how you use the site, information may include:

• Account and sign-in: If you sign in with Google, we receive what Google shares for authentication (for example, identifiers and basic profile elements you authorize).
• Usage and device data: Through Google measurement tools, we may receive aggregated or pseudonymous analytics about how the site is used (for example, pages viewed, approximate region, device/browser type).
• Communications: If you contact us, we keep what you send and what we need to respond.

Why we collect it

We process information to:

• Provide, operate, and secure Surfboard
• Authenticate you when you choose Google sign-in
• Understand product usage and improve the service
• Comply with law and respond to lawful requests
• Prepare for future features such as advertising (see below)

How we use and share data

We use information only for the purposes above. We do not sell your personal information as a product. We may share data with service providers who help us run the site (for example, hosting, analytics, authentication), under contracts that require them to protect the data and use it only for our instructions, where applicable.

If we are required to disclose information by law or to protect rights, safety, or security, we may do so when permitted.

How long we keep data

We keep information only as long as needed for the purposes in this policy, unless a longer period is required by law. Analytics data may be retained in aggregated form. Account-related data is kept while your account is active and for a reasonable period afterward to resolve disputes, enforce terms, or meet legal obligations.

Cookies and similar technologies

We and our partners (including Google for measurement) may use cookies, local storage, pixels, or similar technologies to remember preferences, keep you signed in where applicable, and measure how the site performs. You can control cookies through your browser settings; blocking some cookies may limit certain features.

Third parties

Google (sign-in): If you use Google to sign in, Google processes your information under its own terms. See Google Privacy & Terms.

Google (measurement): We use Google services for analytics and measurement. Those services may set cookies or collect device and usage data as described in Google's policies and product documentation.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to or limit certain processing. You may also have the right to complain to a supervisory authority. To exercise rights that apply to you, contact us using the details in Contact us. We will respond in line with applicable law.

California (CCPA): California residents may have additional rights (for example, knowing categories of personal information collected, requesting deletion, and opting out of certain sharing). Contact us to submit a request. We do not sell personal information for money as defined under applicable law; we describe future advertising separately above.

EEA/UK (GDPR): If GDPR applies, we process data where we have a lawful basis (such as contract, legitimate interests, or consent where required). You may have rights to access, rectification, erasure, restriction, portability, and objection; contact us to exercise them.

Advertising

We may introduce advertising or marketing partnerships in the future. If we do, we will update this policy and provide additional notices or choices where required before those activities affect you.

Contact us

For privacy questions or requests about Surfboard, contact us through the channels listed on surfboard.bandprotocol.com, or write to us at: bd@bandprotocol.com

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes may be communicated through the site or other appropriate means.