Privacy Policy

Old Skool Board is developed and operated by Spindrift Labs, a sole trader business based in Victoria, Australia.

• Contact: support@spindriftlabs.net
• Security: security@spindriftlabs.net

This policy describes how Old Skool Board collects, uses, and protects information when you use the app through the Atlassian Marketplace on Jira Cloud.

Old Skool Board reads and updates the following data in your Jira Cloud instance via the Jira REST API:

• Board and project configuration — board names, columns, filters, quick filters, workflows, issue types, and priorities
• Work item data — summaries, descriptions, comments, statuses, issue types, assignees, reporters, priorities, labels, dates, parents, links, epics, and sprints
• User information — display names, avatars, and account identifiers (as provided by Jira for display purposes), including the results of user searches when you @mention someone or change an assignee

This data is read live from Jira each time you use the app. It is not copied to external systems.

When you act on the board, the app makes the change in Jira for you: it creates work items and sub-tasks, changes status, edits fields and comments, and sets rank when you reorder cards. Every change is made as you, using your own Jira permissions, and appears in Jira's history like any other change.

Old Skool Board uses the Forge Storage API to store a small amount of configuration data:

Preferences and prompt state are stored per user, keyed by your Atlassian account identifier. Card order records from earlier versions were shared by everyone in the project and contain only work item and sub-task keys. No display names, email addresses, or other profile data is stored.

All stored data resides entirely within Atlassian's cloud infrastructure and is encrypted at rest by Atlassian.

Within the app itself (the Jira Cloud experience, running on Atlassian Forge), Old Skool Board does not:

• Use analytics or tracking services
• Set cookies
• Send data to external servers or third parties
• Collect email addresses, IP addresses, or device information
• Record which work items you view or change (the only usage data kept is the per-user board visit count listed above)
• Use advertising or profiling

The app makes no outbound requests to anything outside Atlassian's infrastructure (see the Security Statement).

This section covers the marketing website you're reading right now (spindriftlabs.net), which is a separate system from the Jira Cloud app described above.

Since 16 July 2026, spindriftlabs.net uses Google Analytics (GA4) to understand website traffic — including whether visitors are arriving via the Atlassian Marketplace listing. This is standard web analytics and sets cookies in your browser when you visit this website (not the app).

Analytics only runs with your consent. GA4 does not load — and no analytics cookies are set — unless you choose "Accept analytics" in the banner shown on your first visit. If you decline, the site works identically with no analytics at all. You can change your choice at any time via cookie preferences.

• The Jira Cloud app itself remains analytics-free, as described above.
• We do not use GA4 (or any analytics) inside the app or on any data read from your Jira instance.
• If you have concerns about website analytics, contact support@spindriftlabs.net.

All data remains within Atlassian's cloud infrastructure. The app runs on the Atlassian Forge platform. There are no external servers, databases, or third-party services.

Atlassian acts as a data processor on our behalf. Their Data Processing Addendum governs how they handle data stored and processed through Forge.

We do not share, sell, or transfer your data to any third party.

• Stored data is retained for as long as the app is installed
• Each week the app reports the account identifiers stored with board preferences and selected-board records to Atlassian, and deletes those records for any account Atlassian reports as closed
• When the app is uninstalled, all Forge Storage data associated with the installation is deleted
• There is no data retained after uninstallation

Under GDPR (European Economic Area)

If you are in the EEA, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise these rights, contact support@spindriftlabs.net.

Legal basis for processing: We process account identifiers on the basis of legitimate interest (Article 6(1)(f)) — specifically, to provide per-user preferences within the app and to time in-app feedback and review prompts.

Under CCPA (California)

We do not sell or share personal information as defined under the California Consumer Privacy Act.

Data is handled within Atlassian's cloud infrastructure. Atlassian's own data transfer mechanisms (including EU-US Data Privacy Framework and Standard Contractual Clauses) apply to any transfers between regions.

Old Skool Board is not directed at children under the age of 16. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be noted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the revised policy.

• Email: support@spindriftlabs.net
• Security issues: security@spindriftlabs.net

Spindrift Labs is a sole trader business based in Victoria, Australia.