Security
How G Kanban protects your data. This describes current practices; items marked Planned are not yet available.
- Local-first. Your boards live in your browser and never leave your device unless you sign in and turn on sync.
- Your data, your account only. Cloud data is isolated per account and only ever readable/writable by you.
- EU-hosted when synced (Frankfurt, Germany). No trackers, no ads, no data sales.
- You can leave anytime — one-click JSON export, and self-serve deletion of your account or this device.
1. Local-first by default
By default, everything you create stays in your browser's local storage on your own device. With no account and no sync, G Kanban makes no network calls for your data at all — there is nothing for us to see, lose, or leak.
2. Encryption in transit
The app and the standalone pages are served over HTTPS (TLS). When sync is enabled, all traffic between your browser and our cloud backend travels over encrypted connections.
3. Authentication
Sign-in is via OAuth with Google or GitHub, handled by our authentication provider (Supabase Auth). We never see or store your password — only your email, name, avatar, and a provider account ID, used to create and secure your account.
4. Access control & account isolation
- Row-Level Security (RLS): every cloud row is owner-scoped at the database level — you can only ever read or write your own data.
- Per-identity isolation: each account uses its own separate local storage bucket, so accounts can never bleed into one another on a shared device.
5. Hosting & data location
When you enable sync, your data is stored with Supabase in the EU (Frankfurt, Germany). The app and static pages are delivered by Cloudflare's global edge network. We chose EU hosting deliberately for its strong data-protection regime.
6. Application hardening
- Content Security Policy (CSP): a strict policy restricts scripts to our own origin (
script-src 'self') — no third-party or inline scripts run. - Self-hosted fonts: we serve our own fonts rather than a third-party font CDN, so your IP address isn't shared with a font provider just for visiting.
- No third-party trackers or advertising cookies.
7. Payments
Billing for paid plans is handled by our Merchant of Record, Polar. Card and payment details are entered on the provider's PCI-compliant checkout — we never receive or store your card data.
8. Your data is portable and deletable
- Export: one-click JSON export of all your boards at any time.
- Delete account: removes your account and all cloud data (a database cascade wipes every related row).
- Delete local data: wipes this device's storage.
9. End-to-end encrypted backup Planned
A future "sovereignty" option will let you encrypt your cloud backup with a passphrase only you hold, so even we cannot read it. Until it ships, cloud data is protected by the controls above but is readable by the service to provide sync.
10. Sub-processors
We rely on a small set of vetted providers: Supabase (database & authentication, EU), Cloudflare (hosting & CDN), the OAuth providers you choose (Google / GitHub), and Polar (payments, Merchant of Record). See the Privacy Policy for details.
11. Reporting a vulnerability
Found a security issue? Please email support@gkanban.com with the details. We welcome responsible disclosure and will work with you to resolve it.