Privacy Policy

Information you give us

• Account information. When you create an account: your display name, email address and password. We store your password only as a one-way hash, so we cannot read it.
• Saved progress. When you choose Save to Account, a copy of your progress, including your board, notes and saved boards.
• Communications. Messages you send us and the email address you send them from.

Information collected automatically

• Activity. While you are signed in, we record the connections you draw and the records you pin, which case file you have open, and when you were last active.
• Device and log information. Like most websites, our hosting provider receives your IP address, your browser and device type, and the pages you request, and keeps server logs for security and operations.
• Cookies and local storage. See Cookies and similar technologies, below.

• To provide and operate the Services, keep you signed in and save your progress.
• To respond to your requests and messages.
• To keep the Services secure, prevent fraud and abuse, and enforce our Terms of Service.
• To comply with the law.

We do not sell your personal information, and we do not share it for targeted advertising.

• With service providers that run the Services for us: Vercel (hosting), Neon (database), Cloudflare (domain and file delivery) and Zoho (email). If you buy a subscription, Stripe processes your payment and Link, Stripe's checkout, sells you the subscription as the merchant of record, under their own terms and privacy policies. We receive your email address and the status of your subscription, never your full card number.
• For legal reasons, when the law requires it, or to protect the rights, property or safety of OpenCase, our users or others.
• In a business transfer, such as a merger, acquisition or sale of assets.

Some records, images and video on the Services load directly from the archives and media hosts that publish them, including government media services and Wikimedia. When it does, your browser connects to that site, which receives your IP address and browser information under its own privacy policy.

We use only the cookies the Services need to work:

• session_token keeps you signed in. It expires 30 days after you sign in, or when you sign out.
• oc_gate remembers the access password while the Services are in private testing. It lasts up to 30 days.

We also keep your settings, progress and saves in your browser's local storage. We do not use advertising or analytics cookies, and we do not track you across other websites.

• To access, correct or delete your personal information, or to get a copy of it, email support@opencase.app from the email address on your account.
• To clear what the Services store in your browser, use your browser's settings.

Depending on where you live, including California, the European Union and the United Kingdom, you may have additional rights, such as the right to object to or restrict how we use your information. We honor these requests wherever you live, and we will not treat you differently for making one. If you are in the EU or UK, you may also complain to your local data protection authority.

We process your information to provide the Services you ask for, for our legitimate interests in keeping the Services secure and working, to comply with the law, and with your consent where the law requires it.

We keep account information and saved progress while your account exists. When you ask us to delete your account, we delete it within 30 days, except where we must keep information to comply with the law; copies in backups expire on a rolling basis after that. Our hosting provider keeps server logs for a limited period.

We protect your information with measures that include encrypted connections and hashed passwords. No method of transmission or storage is completely secure, so use a password you do not use anywhere else.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13, or under 16 outside the United States and the United Kingdom. If you believe a child has given us personal information, contact us at support@opencase.app and we will delete it.

OpenCase is operated from the United States, and our service providers store information in the United States. If you use the Services from outside the United States, your information is transferred to and processed in the United States.

We may update this policy from time to time. When we do, we will update the date at the top of this page, and for material changes we will give notice on the Services before they take effect.

Questions, requests or concerns about privacy: support@opencase.app. By mail: OpenCase LLC, 522 W Riverside Ave Ste 10711, Spokane, WA 99201.