Privacy Policy

1. Who we are

RogueBoard is a platform where students join real projects, work through a task programme, and earn a verifiable credential when their work is approved. This policy explains what personal data we collect, why we collect it, where it lives, and what rights you have over it.

2. What we collect

• Account details — your email address and password, used to sign you in.
• Your display name, shown on your profile and on any credential you earn.
• Optional profile information — a headline, skills, interests, and career goals, if you choose to add them.
• Project activity — your applications and enrolments on projects.
• Task evidence — the text you submit and the files you upload when completing project tasks.
• XP, which is derived from work that has been reviewed and approved.
• Feedback you send us through forms on the platform.

3. How we use it

• To run your account and sign you in.
• To manage your project applications, enrolments, and task submissions.
• To let the project's organisation, or RogueBoard admins, review the evidence you submit.
• To issue and display credentials for projects you complete.
• To send transactional emails — account confirmation and password reset — via our email provider. We don't send marketing email.
• To improve the platform using the feedback you send us.

4. Where your data lives

Your data is stored with Supabase (a Postgres database and file storage), hosted in the EU (AWS eu-west-1, Ireland). The website itself is served by Vercel. We don't sell personal data to anyone, and we don't share it with advertisers or data brokers.

5. Who can see what

• Evidence files you upload are private. They are visible only to you, to reviewers on that project, and to platform admins.
• Credentials are public — that is their purpose. A completed project issues a verification page at /verify/RB-XXXX showing the project title, your display name, the completion date, and the skills involved, so anyone you share the link with can confirm it's genuine.

6. Cookies

We use only the essential cookies needed to keep you signed in. There are no analytics cookies, no tracking cookies, and no advertising cookies on RogueBoard.

7. Your rights

Under UK GDPR you can ask us to access, correct, or delete the personal data we hold about you, or to give you a copy of it in a portable format. To exercise any of these rights, email Joseph@rogueboard.co.uk.

If you ask us to delete your account, we remove your profile, your enrolments, and your evidence files. Credentials you have already been issued are retained as public verification records — that's what makes them trustworthy — but the link back to your account is removed.

8. Data retention

We keep your data for as long as your account is active. When your account is deleted, your data is removed as described above, unless we're required by law to keep something for longer.

9. Changes to this policy

If we change how we handle your data — for example, by adding a new provider — we'll update this page and change the "last updated" date at the top.

10. Contact

Questions about this policy or your data can be sent to Joseph@rogueboard.co.uk.