1. Introduction
Alignlee ("we," "our," or "us") provides free team alignment and estimation tools. This Privacy Policy explains how we collect, use, and protect information when you use our services at alignlee.com.
2. Data We Collect
2.1 Information You Provide:
- Room Codes: Alphanumeric identifiers you create to join planning sessions
- Participant Names: Display names you choose when joining a room
- Voting Data: Your story point estimates and votes during planning poker sessions
2.2 Automatically Collected Data:
- Technical Data: Browser type, device type, IP address (for security and service functionality only)
- Usage Data: Pages visited, features used (aggregated and anonymized for service improvement)
2.3 Analytics Services:
- Google Analytics: We use Google Analytics to collect anonymized data about how visitors use our website, including page views, session duration, and user interactions. This data is collected through cookies and helps us understand user behavior and improve our service. Google Analytics may collect your IP address (anonymized), browser information, and device information. For more information about how Google uses data, visit Google's Privacy Policy. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
- Vercel Analytics: We use Vercel Analytics to collect anonymized performance and usage metrics to help us understand how our application performs. Vercel Analytics is privacy-friendly and does not use cookies or collect personally identifiable information.
2.4 Data We DO NOT Collect:
- Email addresses (unless you contact us directly)
- Payment information (service is free)
- Third-party advertising cookies
- Personal identifiable information beyond participant names
3. How We Use Your Data
We use collected data exclusively for:
- Service Delivery: Enabling real-time collaboration in planning poker rooms
- Security: Preventing abuse and maintaining service integrity
- Service Improvement: Analyzing usage patterns to enhance features (anonymized data only)
4. Data Storage & Retention
4.1 Ephemeral Storage:
Room data (participant names, votes, room codes) is stored temporarily in memory and is automatically deleted when:
- All participants leave the room
- The room has been inactive for 24 hours
- The session is explicitly ended by a facilitator
4.2 No Long-Term Storage:
We do not maintain historical records of your planning sessions, estimates, or team discussions. Once a room is closed, all associated data is permanently deleted.
5. Data Sharing & Third Parties
We do NOT sell, rent, or share your personal data with third parties for marketing purposes. We only share data in these limited circumstances:
- Service Providers: Cloud infrastructure providers (e.g., Convex) who host our service under strict data processing agreements
- Analytics Services: Google Analytics (for anonymized usage analytics) and Vercel Analytics (for performance monitoring). These services operate under their own privacy policies and data processing agreements.
- Legal Obligations: When required by law or to protect our legal rights
- With Your Consent: When you explicitly authorize sharing
6. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of data we hold about you (contact privacy@alignlee.org)
- Deletion: Request deletion of your data (most data is automatically deleted after sessions)
- Portability: Export your data in a machine-readable format
- Opt-Out: Decline analytics tracking by:
- Installing the Google Analytics Opt-out Browser Add-on
- Adjusting your browser cookie settings to block analytics cookies
- Using browser privacy features like "Do Not Track"
- Correction: Update or correct inaccurate information
7. Security Measures
- Encryption: All data transmitted using TLS 1.3 encryption
- Access Controls: Restricted access to systems and data
- Regular Audits: Periodic security reviews and updates
- Minimal Collection: We only collect what's absolutely necessary
8. Cookies & Tracking
8.1 Cookies We Use:
- Essential Cookies: Required for basic functionality (e.g., remembering your session in planning poker rooms)
- Analytics Cookies: Google Analytics cookies (_ga, _gid, _gat) to understand how visitors use our service. These cookies collect anonymized information and can be blocked using browser settings or the Google Analytics opt-out add-on.
8.2 Local Browser Storage:
We use your browser's local storage to enhance your experience. This data is stored only on your device and is never transmitted to our servers:
- Session Data: Room codes and participant IDs to maintain your planning poker sessions
- Preferences: Your chosen display name and favorite icebreaker questions
- Game Progress: Slot machine game balance (entertainment feature)
This data remains on your device and can be cleared at any time through your browser settings.
8.3 What We Do NOT Use:
- Third-party advertising cookies or ad networks
- Cross-site tracking cookies for profiling
- Social media tracking pixels (Facebook Pixel, Twitter Pixel, etc.)
- Marketing or retargeting cookies
8.4 Managing Cookies:
You can control cookies through your browser settings. Note that blocking essential cookies may impact site functionality. To opt-out of Google Analytics specifically, install the Google Analytics Opt-out Browser Add-on.
9. Children's Privacy
Alignlee is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided data, contact us at privacy@alignlee.org for immediate deletion.
10. International Data Transfers
Your data may be processed in servers located in the United States or other countries where our infrastructure providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with GDPR requirements.
11. Data Breach Notification
In the unlikely event of a data breach affecting your personal data, we will notify affected users within 72 hours via email (if provided) or through a prominent notice on our website.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be announced on our website. Continued use of Alignlee after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions, concerns, or requests:
- Email: privacy@alignlee.org
- Data Protection Officer: Available upon request for enterprise users
14. Legal Basis (GDPR)
Our legal basis for processing personal data:
- Consent: You provide participant names voluntarily when joining rooms
- Legitimate Interest: Service delivery, security, and improvement
- Legal Obligation: Compliance with applicable laws