How this MVP handles data
This notice describes the data features built into GooeyFlow Dashboard. The person operating a deployment must provide their identity, contact details, purposes, legal bases, retention periods, recipients, and user-rights process before inviting real users.
Invited accounts
The dashboard stores an email address, salted password hash, account status, creation time, and expiring server-side sessions. Passwords and session tokens are not stored in readable form.
Mailing list
Joining is optional and separate from account access. The mailing list stores only the normalized email address and consent time. You can remove your address from the mailing-list page.
Anonymous product counters
The application counts allow-listed feature uses by date. Those counters do not contain user IDs, IP addresses, cookies, or request details. Infrastructure logs and imported logger data must be governed separately by the deployment operator.
Important deployment work
Use HTTPS, set secure cookies, restrict administrator access, establish retention and deletion procedures, and replace this draft with operator-specific contact and legal information. These technical measures do not by themselves guarantee GDPR compliance.