Who runs Pointable
Pointable is operated by Pointable (placeholder operator), who is responsible for the personal information described here. For privacy questions or requests, contact hello@pointable.site.
What we collect
You choose the name and avatar you use. You or your teammates provide session names, ticket titles, descriptions, links, questions, votes and agreed estimates. We also store room and participant identifiers, a hash of your browser identity, an expiry time, a salted hash if you set a room password, and activity times used to show whether you’re present.
Our hosting providers process technical request information, such as IP addresses, browser details, request times and errors, to deliver and protect the service. Pointable doesn’t require an account, payment information or an email address to join a room.
Please don’t put passwords, sensitive personal information or confidential material you aren’t authorised to share into tickets or questions.
Why we use it
We use room information to run planning sessions, identify your seat, keep individual votes hidden until reveal, save team estimates and show changes to teammates. We use technical information to keep the service secure and diagnose failures. Password attempt counts are stored with a hashed network identifier for a 15-minute limit window. Expired attempt records are removed when a later protected join is checked, and all are deleted with the room.
Our basis for this processing is our legitimate interest in providing and protecting a collaborative planning service requested by its users. You can object to this processing. Optional browser storage is used only with your consent, which you can withdraw in Cookie settings at any time.
We don’t sell your information, use advertising trackers, or send ticket content to an AI service. There are no analytics or session recording scripts in Pointable.
How long it stays
New rooms expire 7 days after creation by default. The host can choose 1 hour, 24 hours, 7 days or 30 days when creating a room. Expiry is fixed and isn’t extended by returning or finishing a session. Access stops at expiry, and a daily cleanup removes expired room records from the active database. Rooms created before expiry was introduced expire on 31 October 2026 at 18:00 UTC. Provider backups may retain copies under their own retention settings. Finishing a session, leaving a room or clearing cookies does not immediately delete the stored room. Export anything you need before expiry.
Your room identity cookie lasts up to 90 days and is renewed when you take an action. Cookie choices are remembered for 180 days. Optional browser details remain until you clear them, withdraw permission, or Pointable next reads an expired choice. See our cookie policy for the full list.
Technical logs and any provider backups follow the providers’ retention settings. We have not set a separate fixed retention period for those records.
Your choices and rights
You may ask to access, correct or erase your personal information, restrict its use, object to processing, or receive a copy where the relevant right applies. To make a request, contact hello@pointable.site. Include the room link and the name you used, but never send your browser identity cookie. We may need to verify that the information relates to you.
Turning off optional browser storage takes effect through Cookie settings. Clearing the essential identity cookie loses your seat, including host access; there is no account recovery.
If you’re unhappy with how we handle your information, you can contact us or complain to the UK Information Commissioner’s Office, or your local data protection authority.
Changes to this notice
We’ll update this page when the way Pointable handles information changes. The date at the top shows the latest revision. Any new optional tracking would require its own explanation and choice before it starts.