Privacy policy
You can read BlockBoard without an account, and then we know very little about you. This page explains what we collect in each case, why, and for how long.
Last updated October 17, 2026
1. If you read without an account
- Connection data. Every request reaches us through Cloudflare, which protects the site and speeds it up. Cloudflare and our server see your IP address, browser and the page you ask for. Our server keeps this in technical logs that are deleted automatically as new ones fill up.
- Audience measurement. We count visits with an analytics tool that doesn't use cookies and doesn't follow you to other sites.
- Display preferences. If you choose light or dark mode, or fold the sidebar, a small cookie remembers it. The cookie policy lists them all.
We don't show ads and we don't use advertising trackers.
2. If you create an account
| What | Why |
|---|---|
| Your email address and the name you give us | To identify your account and write to you about it |
| Your password, stored only as a secure hash (Argon2) | To let you sign in. We can't read it. |
| Your active sessions, with the IP address and browser of each | To keep you signed in, and to show you on your account page where you're signed in |
| Sign-in attempts, with the IP address and email they used | To block people trying to guess passwords |
| Your preferences: board layout, favourites, topics, theme | To show you the site the way you set it up |
| What you create: portfolio, watchlist, alerts, likes and saved stories | Because they are the features you use |
| The pages you view while signed in: section, page, coin or search, time on page, screen size and how far you scroll. Not your IP address. | To understand which parts of BlockBoard are used, and improve them |
Signing up, signing in and resetting a password are protected by Cloudflare Turnstile, which checks that you're a person. To do that, Cloudflare receives your IP address and some technical signals from your browser.
3. Emails
We email you to verify your address, reset your password, confirm changes to your account and send the alerts you set up. We don't send marketing emails.
4. Why we're allowed to use this data
- To provide the service you asked for: your account, its features and the emails that go with it.
- Our legitimate interest in keeping the site secure, preventing abuse and understanding how it's used.
5. Who we share it with
- Cloudflare, which carries all traffic to the site and runs Turnstile. It operates worldwide, under the safeguards that European data protection law requires for transfers outside the EU.
- Nobody else. We don't sell personal data. The AI models we use to write summaries never receive anything about our readers.
6. How long we keep it
| Data | Kept for |
|---|---|
| Sign-in attempts | 30 days |
| Sessions | A session ends after 30 days, or 7 days without use. Ended sessions are deleted 30 days later. |
| Technical logs | Deleted automatically as new ones fill up |
| Your account and what you create in it | As long as your account exists |
7. Deleting your account
When an account is deleted, we erase your email address, name, password, linked sign-in methods and preferences, and sign you out everywhere. What you created — portfolio, alerts, likes and page history — stays attached to an anonymous identifier that no longer leads back to you.
8. Your rights
Under data protection law you can ask for a copy of your data, correct it, delete it, object to how we use it, restrict its use, or receive it in a portable format. If you think we're handling your data unlawfully, you can complain to your local data protection authority.
9. Children
BlockBoard isn't meant for anyone under 16, and we don't knowingly hold their data.
10. Changes
We'll update this page when what we collect or how we use it changes. The date at the top shows the latest version.