Privacy Policy

Effective October 1, 2026

This policy explains what Unredundant, LLC ("we", "us") collects when you use MyQuoteboard, why we collect it, and what control you have over it. It applies to the MyQuoteboard website and its iOS and Android apps.

Information we collect

Information you give us

• Account details: your email address, username, and display name.
• Your password, which we store only as a salted hash (argon2). We cannot see or recover your actual password.
• Profile details you choose to add: a short bio and a profile photo.
• Content you post: quotes, the lines within them, speaker names and labels, context notes, comments, and likes.
• Connections you make: who you follow, your friend requests, the people you credit as speakers, and whether each of those people has accepted the credit.
• Friend suggestions and invitations you send: who you suggested to whom, and the email addresses you invite. See Invitations and friend suggestions.

Information collected automatically

• A session cookie so you stay signed in. It holds a random token, not your personal details, and expires after 30 days of inactivity.
• Your IP address, held briefly in server memory to rate-limit abuse (for example, repeated password-reset requests). It is not written to our database.
• What you're signed in with: whether it's the website, the iOS app or the Android app, the app's version, your browser's user-agent string, and when that sign-in was last used. We use it to spot problems caused by out-of-date apps. It is deleted when you sign out or the sign-in expires.
• A widget token if you use the iOS app, so its home and lock screen widgets can show the latest quote in your feed. It is stored in your phone's keychain, can only fetch that one quote, and stops working when you sign out. We record when it was last used.
• Standard server logs recording requests and errors, used to keep the service running and to investigate problems.
• Push notification tokens if you turn on notifications — a device identifier issued by Apple, Google, or your browser so we can deliver alerts. Turning notifications off removes it.
• Whether you opened or acted on a notification. Our notification emails contain a small invisible image, and tapping a push notification tells our server it was tapped. We record that the notification was opened or followed, when, and which channel it arrived on — not your IP address, not your device, and nothing about what you read afterwards. We use it to judge whether we are sending too many notifications, or the wrong ones. Turning email notifications off in Settings stops the emails, and with them the image.

What we don't do

We do not sell or rent your personal information. We do not show advertising, and we do not embed third-party advertising or social media trackers. We do not use any third-party analytics service — the notification measurement described above is our own, stays on our own servers, and is never used to build an advertising profile. If we add broader analytics in future to understand how the app is used, we will update this policy, and we will not use it to build advertising profiles or share your data with advertisers.

What is public

This matters more than anything else in this policy, so please read it carefully:

• Quotes set to public visibility can be read by anyone, including people who are not signed in and search engines.
• Quotes set to friends are visible to people you have accepted as friends — and to the friends of anyone you credit as a speaker, where that person has accepted the credit and chosen to show the quote to their own friends. A quote belongs to the person who said it as much as to the person who wrote it down, so its audience can span both circles. It never happens without that speaker choosing it, and a speaker who declines or removes their credit shares nothing.
• Profile photos are always public. They are served from a direct link that requires no sign-in, so anyone with the link can view the image.
• Your username, display name, bio, and photo are visible on your profile page.

If something should stay private, post it as friends-only and credit nobody — or don't post it. Remember that crediting someone puts the quote within reach of their friends if they choose it. We can't un-share something after other people have seen or copied it.

Being credited as a speaker

A friend can credit you as the speaker of a line they post. Because that puts words in your mouth in front of an audience you did not choose — their friends, not yours — it is your decision, not theirs, whether the quote carries your name.

• By default we ask you first. Until you accept a credit, the quote shows only the plain name the poster typed. Your display name, photo, and profile link are not shown, and the quote does not appear on your profile. We notify you so you can decide.
• The name the poster typed is still shown, and it is often your real one. When they pick you from their friend list we fill that name in for them, so an unaccepted credit frequently spells out who you are even though nothing links to your account. Accepting controls whether MyQuoteboard confirms it is you and connects the quote to your profile — it cannot stop someone writing your name, here or anywhere else.
• Once you accept, the quote shows your name and photo, links to your profile, and is listed on your profile among the quotes you appear in.
• Every decision is made on the quote itself, and every one can be undone. Accept a credit, decline it, or change your mind later — declining returns the quote to the plain name the poster typed, and accepting again is always offered on the quote.

Two people can see an unanswered credit before you decide: the person who posted the quote, who made it, and you, so you can answer it. Removing a credit removes your name from the quote, but it does not delete the quote or the words themselves — those belong to whoever posted them, and the removal request below is the route for that.

Once you have accepted a credit on a public quote, you can also choose to show that quote in your own friends' feeds. It is off unless you turn it on, it is decided per quote rather than once for all of them, and it can be turned off again. It only affects whether a quote appears in a feed: it never opens a friends-only quote to anyone the poster did not already share it with, and it grants nobody access they did not have already, since a public quote is readable by anyone with the link.

Quotes about other people

MyQuoteboard is built around recording things other people said, so the content you post will often contain someone else's name and words — including, frequently, children in your family. Those people may not use MyQuoteboard and may never have agreed to appear on it.

You are responsible for having permission to post what you post. Please think before posting anything identifying about a child, and use friends-only visibility for anything you would not want a stranger to read. Do not post other people's contact details, addresses, or other private information.

If a quote, comment, or photo on MyQuoteboard names you or your child and you want it removed, email privacy@myquoteboard.com and we will review and remove it. You do not need an account to make that request.

Invitations and friend suggestions

• Inviting someone by email. We store the address, who invited it, and when. We send an address at most one invitation every 30 days, however many people invite it, and the email names only the person who invited them — there is no personal message. If the address signs up within 30 days and confirms it, we tell whoever invited it and send them a friend request from each inviter. If the address already belongs to an account, we send no email; the invitation becomes a friend request instead.
• Stopping invitations. Every invitation email has a link to stop them. Using it puts the address on a do-not-invite list, which we keep so we can keep honoring it.
• Friend suggestions. A friend can suggest people for you, or suggest you to people they know. The person a suggestion is for sees who made it. The person suggested is not told unless a friend request follows. Suggestions are only made between people who are both the suggester's friends, or to someone who joined through the suggester's invitation.

Quotes from the original MyQuoteboard

MyQuoteboard first ran in 2011 and 2012. We kept the quotes posted then, along with the names and Facebook identifiers they were recorded with. If you posted quotes back then and have an account now, we may offer them back to you, occasionally, so you can repost them. Nobody else sees them unless you repost one, which works like posting any new quote.

Children

MyQuoteboard is not directed to children, and accounts are for people 13 and older. We do not knowingly collect personal information directly from children under 13. If we learn that a child under 13 has created an account, we will delete it.

Adults do post quotes containing children's names and words. That information is supplied by the account holder, not collected from the child, and it is subject to the removal process described above.

How we use your information

• To create and run your account, and keep you signed in.
• To display your quotes, profile, and connections to the audience you chose.
• To send you notifications you asked for — in-app, by email, and by push — and to send transactional email such as password resets.
• To keep the service secure, prevent abuse, and enforce our terms.
• To fix problems and improve how the app works.
• To measure whether the notifications we send are wanted — see notification measurement above.

You can turn email notifications off in Settings. Password-reset emails are sent regardless, because they are needed to protect your account.

Who we share it with

We share personal information only with the service providers who make the app work, and only as needed:

• Contabo — hosts the application servers and database.
• Brevo — delivers our email. Receives the recipient address and message content.
• Apple — delivers push notifications to iOS devices. Receives your device token and the notification text.
• Google (Firebase Cloud Messaging) — delivers push notifications to Android devices. Receives your device token and the notification text.

We may also disclose information if legally required, or to protect the rights and safety of our users. If the service is ever transferred to another owner, your information would transfer with it, and we would tell you first.

Where your data is stored

Your information is stored on servers operated by Contabo in the United States.

How long we keep it

• Account information and content are kept until you delete them or delete your account.
• Sessions expire after 30 days of inactivity. Password-reset links expire after one hour.
• Notification measurement records are deleted with the notification they describe, which goes when you delete your account.
• Invitations are kept with the account that sent them, and deleted when that account is. Addresses on the do-not-invite list are kept indefinitely, since the list only works if it lasts.
• When you delete your account, it is removed from our live systems immediately — including your quotes, comments, likes, connections, notification tokens, and profile photo. Copies may persist in encrypted database backups for up to 30 days, after which they are overwritten.

Security

Traffic is encrypted with HTTPS. Passwords are stored as argon2 hashes, and session, password-reset and widget tokens are stored only as hashes, so a copy of our database would not reveal them. No system is perfectly secure, and we can't guarantee absolute security — please use a strong, unique password.

Your choices

• Access and correct: view and edit your profile in Settings.
• Delete: Settings → Danger zone → Delete my account removes your account and its content. You can also delete individual quotes and comments.
• Notifications: turn email and push notifications on or off in Settings.
• Visibility: choose public or friends-only for each quote when you post it.
• Invitations: if you were invited and don't want more, use the link in the email. You don't need an account.

California privacy rights

If you live in California, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it, to request a copy of it, to ask us to correct or delete it, and not to be discriminated against for exercising those rights. The categories we collect are described above: identifiers (email, username, IP address), your content, device identifiers for push notifications, and electronic activity limited to whether you opened or followed a notification we sent you.

We do not sell or share your personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioral advertising. To exercise any of these rights, email privacy@myquoteboard.com. Most requests are handled directly in Settings and take effect immediately.

Changes to this policy

If we make a meaningful change, we will update the effective date at the top and, for significant changes, notify you in the app or by email.

Contact

Questions or requests: privacy@myquoteboard.com, or write to Unredundant, LLC, Arizona, USA.