How Boromlia timeline software collects, uses and protects personal data. Your work is private by default.
Controller: Oleksii Khodenko, an individual entrepreneur registered in Ukraine, trading as Boromlia, Sumy, Ukraine. Contact support@boromlia.com. The full registered address is sent on request.
We collect what you give us (name, email, a hashed password, an optional profile photo; the timelines, events, photos and text you create; purchase records; messages you send) and what the site records (request logs with IP address and browser, opens of shared and public timelines, and the site that referred your first visit). Signing in with Google shares your name, email and profile photo; we never see your Google password.
Card payments are processed by WayForPay, a payment service provider in Ukraine, on its own payment page, as an independent controller. We receive a record of the purchase (plan, amount, currency, date, order reference, outcome and authorisation code) and never your card number.
Analytics without consent: Vercel Web Analytics and Speed Insights, cookieless; and PostHog events held in page memory only until you answer the cookie banner. Analytics with consent: Google Analytics, PostHog and Amplitude with cookies, and session recordings by PostHog and Amplitude that mask form input. You can change your answer on the Privacy Policy page at any time.
Processors: Supabase (database, storage, sign-in), Vercel (hosting), Google (Sign-In, Analytics), PostHog (EU) and Amplitude (US). Place searches go to OpenStreetMap's Nominatim, and map tiles come from OpenStreetMap, OpenTopoMap, CARTO and Esri, which see the reader's IP address. US providers receive data under the EU-US Data Privacy Framework or Standard Contractual Clauses. The GDPR applies to us directly under Art. 3(2).
You can ask for access, correction, erasure, restriction, portability and objection, and withdraw consent. We answer within one month. You can complain to your data-protection authority. Account data is deleted within 30 days of closing an account; purchase records are kept as Ukrainian tax law requires. We do not sell data, show ads, or train models on your content.
View on Boromlia