Privacy

This says what Sameplace holds about the people who use it, who else touches that data, and how long any of it lasts. It is written from the system as it is built, not from a template.

Who holds it

Sameplace is run by the entity named in the footer of this site. Write to the address in the footer with any question about this page or about your own data.

What an account holds

When somebody signs up, Sameplace stores their name, their email address and a hash of their password. Nothing else is asked for. There is no payment information, because nothing is charged during early access.

Beyond the account, an organisation holds:

• its name, its address on this site, and who belongs to it with what role
• the offices in it, and the map document each office is drawn from
• desk assignments, so a desk can carry a name
• chat messages, with their author and the office they were sent in
• each person's settings: language, colour mode, avatar, devices and notification choices
• guest visits: the display name a guest typed, and when they arrived and were last seen

Where it goes

Six companies process some part of it, and no others:

• Neon stores the database.
• Vercel serves this site and the product's pages.
• OVHcloud rents us the servers in Europe that relay audio and shared screens. Nothing is recorded there; the streams pass through and are gone.
• Resend delivers invitations and verification emails.
• Sentry receives error reports from the browser and the servers, which can include the page somebody was on when something broke.
• Excalidraw hosts the whiteboard rooms an office's boards open, on Excalidraw's own servers, under Excalidraw's terms.

Sameplace does not sell data, does not run advertising trackers, and carries no third-party analytics on this site.

How long it lasts

• An account and everything attached to it lasts until the account is deleted.
• Chat messages last until the office they were sent in is deleted.
• A guest is a throwaway account: it holds the name they typed and nothing else, and a daily job removes every guest account older than 24 hours, along with the record of their visit and the messages they sent.
• Error reports are kept by Sentry for as long as Sentry's own retention allows.

Cookies

Three, and no more: the session cookie that keeps somebody signed in, and two that remember the language and the colour mode chosen. None of them tracks anybody across other sites.

Audio, camera and screens

Audio is carried on the open floor between people who are close to each other. A camera and a shared screen only exist inside a video room, and only when the person switches them on. Sameplace does not record any of it and has no feature that would.

Your rights

Ask for a copy of what is held about you, ask for it corrected, or ask for it deleted, by writing to the address in the footer. An organisation's owner can remove a member, which ends their access at once.