← Back to YesYouCanBan

Privacy Policy

Effective Date: July 27, 2026

1. Introduction

Welcome to YesYouCanBan, © 2025 by Lola Devalier and Paul Amedeo Devalier. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website. We are committed to protecting your privacy in compliance with the EU General Data Protection Regulation (GDPR), U.S. privacy laws including the California Consumer Privacy Act (CCPA), and other applicable laws.

2. Who We Are

Business/Website Name: YesYouCanBan
Legal Entity & Address: Sole Proprietorship, Via XXVII Marzo 94, La Spezia (SP), 19121, Italy
Contact Email: info@devalier.com
Data Protection Officer (DPO): Paul Amedeo Devalier, Sole Proprietor and DPO

3. Data We Collect

We do not collect data for profiling or analytics. The data you provide is stored solely for managing your personal Kanban board. The types of data we collect include:

• User account information (e.g. email, name) via Google OAuth.
• Kanban board data (tasks, due dates, descriptions, etc.).
• Cookies and technical data for session management and security.

3a. Cookies and Local Storage

We take a deliberately minimal approach. We use only strictly-necessary cookies — the kind that are exempt from prior consent under the EU ePrivacy Directive and GDPR because the service cannot function without them. We do not use analytics, advertising, tracking, or third-party profiling cookies, and we never sell or share your data. Because of this, you will see a brief informational notice rather than an intrusive consent wall.

Name	Type	Purpose	Retention
session	Cookie (strictly necessary)	Keeps you securely signed in and protects against cross-site request forgery. Set only after you log in with Google.	Cleared when you sign out or the session expires.
yycb-theme, yycb-scale	Local storage (functional)	Remembers your light/dark theme and board zoom on this device. Stored locally in your browser and never transmitted to us.	Until you clear your browser storage.
yycb-privacy-ack	Local storage (functional)	Remembers that you’ve seen this privacy notice so we don’t show it again.	Until you clear your browser storage.

You can clear this information at any time through your browser settings, and re-open the notice from Settings → Privacy & Data in the app.

4. How We Use Your Data

We use your personal data exclusively to operate your personal Kanban board, manage your account, and provide you with a tailored experience. This includes:

• Providing and personalizing our service.
• Authentication and session management via Google OAuth.
• Facilitating secure payment processing through Stripe, if applicable.
• Meeting legal obligations and ensuring the security of your data.

5. Legal Basis for Processing

For users in the EU/EEA, our legal bases for processing your data include:

• Performance of a Contract: To provide you with our service.
• Legitimate Interests: To operate our business and improve our service, balanced against your rights.
• Your Consent: Where required, we will obtain your explicit consent.

6. Data Sharing and Third Parties

We do not sell or share your personal data for marketing purposes. We only share data with:

• Stripe for payment processing (only the data necessary for the transaction).
• Google for authentication and session management through OAuth.

7. Data Retention

Your data is retained for as long as you use our service. It will remain stored until you request its deletion.

8. Your Rights

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you.
• Rectify any inaccuracies in your data.
• Request the erasure of your data under certain conditions.
• Restrict or object to our processing of your data.
• Receive your data in a portable format.

If you are a California resident (under the CCPA/CPRA) or reside in another state or country with similar privacy laws — such as Canada’s PIPEDA — you have comparable rights, including the right to know what personal information we hold and to request its deletion. We do not sell or share your personal information, so no “Do Not Sell or Share My Personal Information” action is required; you can nonetheless exercise every right below.

You can exercise the key rights yourself, instantly, in the app:

• Access & portability: download a complete, machine-readable copy of your data from Settings → Privacy & Data → Export my data.
• Erasure: permanently delete your account and all associated data from Settings → Privacy & Data → Delete my account.

For rectification, restriction, objection, or any other request, contact us at info@devalier.com and we will respond within the timeframes required by law. You also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect data from children.

10. Security Measures

We implement reasonable security measures to protect your data from unauthorized access and disclosure. However, no method of transmission over the Internet is completely secure.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your own. We ensure that appropriate safeguards, such as standard contractual clauses, are in place for any such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page along with an updated Effective Date. We encourage you to review this policy regularly.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:
YesYouCanBan
Via XXVII Marzo 94, La Spezia (SP), 19121, Italy
Email: info@devalier.com