Privacy and analytics

Who we are

This website is operated by Shaun Baker trading as THE DREAMING JESTER, a UK sole trader.

Contact support@jestral.co.uk about privacy or your information.

Legal trader details, including the geographic establishment address required for the online service, are available on the Contact page.

THE DREAMING JESTER is the controller for its website, accounts, direct support and its own product and order records. This notice covers jestral.co.uk, app.jestral.co.uk, optional accounts and cloud features, product analytics, feedback, support and paid orders. Most JESTRAL project work can remain in your browser or local files.

Information JESTRAL uses

Cloudflare handles website and app delivery, connected service requests and security. This can include IP address, request time, requested address, browser or device headers, response details, rate-limit records and security signals. These operational records are separate from optional product analytics.

If you create an account or use a cloud or collaboration feature, JESTRAL processes the account, authentication and session details needed for that feature. Content sent to a cloud workspace can include room membership, workspace snapshots, board or card content, files, discussions and related storage metadata. Local project content is not sent merely because you visit this website.

If you use the “Interested?” form on this website, we store your email address, whether you asked for occasional news and updates as well as the launch announcement, which button on the site you used, the time, and the version of the wording you agreed to. We send the launch announcement once, when JESTRAL opens to new users. We send news and updates only if you ticked the box for them. Every email we send includes an unsubscribe link, and you can also withdraw by contacting support. The form's records are stored in Cloudflare D1, and we send these emails through Cloudflare Email Service, which receives your address and the message in order to deliver it. We also record whether each email was delivered, bounced or failed, so we never email you twice for the same announcement and stop emailing an address that bounces; these records are deleted with your sign-up. We do not sell the list or share it for anyone else's marketing.

If you emailed us to ask for the launch announcement before the form was available, we keep that email and request so we can send the announcement, and we do not add you to news and updates. You can withdraw by replying or contacting support.

For a paid order, Stripe Managed Payments and Sold through Link, LLC can process your contact and billing details, billing country, payment method, tax identifiers, product, price, order status, receipt, refund, dispute and fraud information. JESTRAL receives the order and entitlement information needed to supply, restore and support the purchase. Card details are entered with the hosted provider and are not stored by JESTRAL.

Optional product analytics

The website does not currently collect optional product analytics. It does not show an analytics consent control, create optional website analytics identities or send optional website analytics events. If the site finds a retired website analytics choice or identifier saved by an earlier build, it tries to remove it when the page loads if browser storage permits. The website analytics sender remains absent even when that cleanup fails.

When you are signed in to the app, the app may offer optional product analytics under app notice version app-analytics-2026-09-19-v2. Analytics remains off unless you enable it in Settings → General → Analytics. If enabled, JESTRAL can send pseudonymous install, session and Support IDs; coarse card, board, activity, storage, performance, guidance and error-category measurements; and the app version. The service accepts these events only while the app is signed in, using a Support ID owned by that account and the current consent-generation record. Analytics excludes board text, board and card identifiers, media, pair codes, access tokens and free-form diagnostics.

Changing the app choice does not change website behaviour: optional website analytics remains unavailable.

Feedback and support

A feedback report sends its feedback ID and type, app version, commit and build time, submission time, and the title and details you type to a private GitHub issue repository. The app removes browser copies more than 12 months old when it next starts or reads or writes feedback history; it cannot remove them while the app is closed.

We do not automatically attach board content, board identifiers, contact details or your Support ID. Anything you type into the title or details is included in the report, so avoid passwords and sensitive personal or project information.

Removing the browser copy does not remove an issue already sent to GitHub. Email support is handled through Apple iCloud Mail; anything you put in the message becomes part of that correspondence.

Purposes and lawful bases

• Contract and steps you request before a contract: providing an account or requested cloud feature, supplying and restoring a purchased entitlement, and handling product or account support.
• Legitimate interests and legal obligation where applicable: protecting accounts and services, preventing abuse and fraud, diagnosing faults and retaining proportionate security and compliance evidence.
• Contract and legal obligation: processing orders and refunds and keeping tax, accounting and transaction records.
• Consent: optional signed-in app analytics. The choice is recorded against app notice version app-analytics-2026-09-19-v2; optional website analytics is not collected.
• Consent: sending the launch announcement you ask for and, only if you ticked the box, occasional news and updates. You can withdraw at any time with the unsubscribe link in any email or by contacting support.
• Contract or legitimate interests, depending on the request: receiving and responding to feedback and support and maintaining the resulting service record.

Recipients and their roles

• Cloudflare provides website and app delivery, Workers, D1, R2, Durable Objects, Email Service, security, bot checks and the first-party app analytics service. THE DREAMING JESTER decides its purposes; Cloudflare's customer DPA applies when Cloudflare acts as processor.
• GitHub receives a feedback report only when you submit it to the private issue repository. THE DREAMING JESTER controls its use of that issue; GitHub's applicable account role and provider copies follow its customer terms.
• Apple iCloud Mail receives correspondence when you email JESTRAL support. The mailbox uses the proprietor's iCloud+ account under Apple's iCloud terms.
• Stripe and Sold through Link, LLC handle Managed Payments checkout, tax, receipts, refunds, fraud, disputes and buyer support. Sold through Link, LLC is merchant of record for covered transactions; THE DREAMING JESTER remains the product seller and licensor. Stripe can process information as a controller for its own payment, tax, fraud and buyer-service purposes and as a processor where it follows JESTRAL's instructions. See the consumer terms, privacy policy, privacy center and data processing agreement.
• Professional advisers and public authorities receive information only where reasonably necessary or legally required.

International transfers and hosting location

Some providers process information outside the United Kingdom. Cloudflare's customer DPA incorporates the EU Standard Contractual Clauses and UK Addendum for applicable restricted transfers. Stripe's DPA describes global processing, including by Stripe, LLC in the United States. GitHub publishes a subprocessor list covering the United States and other countries, and Apple describes its handling in its privacy information.

JESTRAL's production D1 and R2 locations were observed in Western Europe. This is a running location, not an EU-only or UK-only storage restriction; Durable Object placement and provider recovery copies may use other locations under the applicable provider terms.

Retention and recovery copies

JESTRAL keeps information for the shortest period that serves the stated purpose, supports the purchased entitlement, or meets an applicable legal, accounting, security, dispute or rights-request need.

• Account sessions expire after 30 days and are removed by the next hourly cleanup. Email verification tokens expire after 24 hours.
• Feedback browser reports more than 12 months old are removed when the app next starts or reads or writes feedback history. They remain while the app is closed and can be removed sooner in the app.
• GitHub feedback issues and iCloud support correspondence are kept only while needed to investigate and respond, maintain a necessary defect or security record, meet a customer request, or handle a transaction, legal claim or legal duty. No fixed provider-copy deletion period is promised.
• A sign-up for the launch announcement only is deleted after that announcement is sent. A sign-up that includes news and updates is kept until you unsubscribe or ask us to delete it. When you unsubscribe, we keep your address only with its dated consent history, marked as unsubscribed, so we do not email you again and can show how your choice was handled; ask support if you want that record deleted too. A launch request sent by email is removed from the send list when you withdraw or after the announcement is sent; the original email remains subject to the support-correspondence rule above.
• Account and optional cloud records are kept while needed to provide the chosen service and to complete a requested closure, export or deletion. Minimal order and entitlement proof may remain while needed to honour a one-time licence, keep required business records or resolve a dispute.
• Order, tax, refund and payout evidence is kept for the applicable UK tax and accounting period and longer only for an open enquiry, dispute or legal claim. Stripe and Sold through Onelink keep their own records under their terms.

D1 Time Travel can retain recoverable database state for 30 days. A restored database must not be returned to ordinary use until outstanding erasures have been reapplied. Other provider and app-owned recovery copies follow their documented purpose and provider terms; this notice does not promise immediate physical removal from every recovery copy.

Analytics retention and withdrawal

The website makes a best-effort attempt to remove retired optional analytics choices and identifiers from local storage when the page loads. Cleanup succeeds only when browser storage permits; the website has no optional analytics sender and starts no optional website analytics requests regardless.

In the signed-in app, turning optional analytics off stops new optional events and aborts the active request immediately for the open app session. Once the app verifies that it durably saved the disabled choice and removed the optional identities, they remain disabled or removed after reload. If browser storage refuses the change, Settings reports the failure and offers a retry; the prior saved choice and identifiers may apply after reload until withdrawal succeeds. An app event already accepted by the service or a request already in flight may still finish processing.

When you are signed in, the app also asks JESTRAL's first-party service to remove analytics rows mapped to your account and linked Support profile. A minimal account-linked withdrawal audit remains with the user ID, action, source, timestamp and a one-way consent-generation hash; it contains no request IP address, raw consent generation or resource ID. It is kept for up to 13 calendar months and removed by the next hourly cleanup after reaching that limit, rather than at the exact second the limit is reached.

For app analytics, unlinked pseudonymous daily rows, legacy rows without a reliable account mapping and non-identifying totals cannot always be matched after a verified local identity removal. Daily rows use UTC calendar-day buckets. The hourly cleanup removes a bucket after its date is earlier than the date 13 calendar months before that run, so removal is not instantaneous at an event's anniversary.

Support-profile event, session and friction counters are recalculated from the retained rolling daily window. The profile's latest coarse storage, workspace and performance metadata, last-activity time, pseudonymous Support ID and verified account link can remain while the profile is active, including values older than the rolling daily window. When no retained daily activity remains, the next hourly cleanup removes the inactive profile.

A submitted GitHub issue is a separate copy and is not deleted by clearing browser history.

Your rights

Depending on the circumstances, you may ask to access, correct, erase, restrict or object to processing, or receive portable information. You may withdraw consent at any time without affecting earlier processing. Email support@jestral.co.uk; identity will be checked proportionately.

If an authenticated deletion cannot be confirmed, JESTRAL does not report it as complete. The app offers a retry and support route, and outstanding erasures must be reapplied before restored data is returned to active use. Some legal, transaction, security or entitlement evidence may be retained where a lawful need remains.

You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. Contacting JESTRAL first is not a condition of complaining to the ICO.

Automated decisions

JESTRAL does not make decisions with legal or similarly significant effects solely through automated processing. Stripe and Sold through Onelink may use automated fraud tools for payment and order decisions; use provider order support or contact JESTRAL if you need help with an order.