Privacy Policy
Last updated: 2026-09-05
Ticketboard is a self-hosted, multi-tenant ticket board operated by an individual based in Ohio, USA. It is an independent personal project and is not operated by, or affiliated with, 45Press. This policy explains what information the service holds, why, and your choices over it.
Information collected
- Identity. When you sign in with Google, the service stores your name, email address, and avatar URL. No password is ever created or handled.
- Content you create. Tickets, comments (including internal threads), subtasks, uploaded files, and any skills or specifications you add.
- Operational data. Login sessions, any API tokens you create, browser push-notification endpoints you enable, in-app notifications, and error diagnostics that may include request metadata.
How it is used
Solely to run the service for you and your organization: to authenticate you, show and organize your tickets, deliver notifications, and keep the service working and secure. Your content is not sold, rented, or used for advertising, and there is no third-party analytics or tracking.
Organization boundaries
The service is multi-tenant. Your data is scoped to your organization; members of other organizations cannot see it. The operator maintains the service infrastructure but your organization's content is not part of ordinary operational surfaces.
Service providers
The service relies on these providers, which may process limited data on its behalf:
- Cloudflare (edge network / CDN)
- Google (authentication / sign-in)
The service is hosted on the operator's own hardware in the United States, behind Cloudflare, which processes network requests (including IP addresses) at its edge.
Cookies
Only a strictly-necessary session cookie is used, to keep you signed in. There are no advertising or analytics cookies, so no cookie-consent banner is required.
Retention and deletion
You can delete your data from Settings: leave an individual organization, or delete your account entirely. When you do, the tickets you reported and comments you wrote are kept but their authorship is anonymized, so your organization's history stays intact. An organization administrator can also delete an entire organization; this is a delayed, reversible process with a recovery window before anything is permanently removed. Expired sessions and old notifications are pruned automatically, and edge logs and backups age out within about 30 days.
Your choices
You may request access to, correction of, or deletion of your personal data at any time by emailing admin@pumkiin.tech. Where the law grants you specific rights over your personal data, the operator will honor them.
Contact
Questions about this policy: admin@pumkiin.tech.