Draft for review: not yet checked by a lawyer. It describes the site and the app as they are today.
Privacy
Who is responsible#
PCB Canvas is made by Vojtěch Krejčík, Czech Republic, who is the controller of the data described here. Contact: vojtech.krejcik@gmail.com.
This website#
- No cookies, no analytics, no tracking scripts, no third-party fonts or CDNs. Everything is served from this server.
- The web server keeps standard access logs (IP address, time, requested page, browser) for security and debugging. See Server and logs.
- There are no accounts. The only form is the beta signup below.
- The trailer picture on the home page is served from this site; pressing play opens the video on YouTube, under Google’s privacy policy.
Beta signups#
When you join the beta list, we store:
- your email address,
- the iPad model, if you choose one,
- the language of the page you signed up on,
- the time of the signup and which version of the consent text you agreed to.
We do not store your IP address with the signup. To stop abuse, the server counts signup attempts per IP address in memory for one hour; that count is never written to disk.
Why: to send you a TestFlight invitation and short messages about the beta. The legal basis is your consent (the checkbox on the form).
Who sees it: only the developer of PCB Canvas. The list is not sold or shared. If we invite you by email through Apple’s TestFlight, Apple receives your email address for that invitation.
How long: until the beta ends, then the list is deleted. You can ask to be removed earlier, or ask what we store about you, at any time: write to vojtech.krejcik@gmail.com.
When the signup form says “signups open soon”, nothing you type is stored.
The app (iPad and Mac)#
- There is no account, no analytics and no tracking. The app collects no personal data.
- Your projects stay on your device (or in the iCloud Drive or Files location you save them to, under Apple’s terms). The app uploads nothing by itself.
- When you open the order review, the app asks JLCPCB’s public parts service for the prices and stock of the LCSC part numbers in your bill of materials. Only the part numbers are sent, together with what every internet request carries (your IP address). JLCPCB handles that request under its own privacy policy.
- Feedback and crash reports are sent only when you choose to, through the Mail app.
- If you turned on sharing with app developers in your device’s settings, Apple may pass us anonymous crash and usage statistics. That is Apple’s setting and under Apple’s privacy policy; we cannot link it to you.
Library packs (the pack server)#
When you browse or install a library pack, the app downloads the pack list and the pack from this server. The server sees the usual request data (IP address, time, which pack) and keeps it only in its access logs (see below). No account or device identifier is sent.
In-app purchases#
PCB Canvas Pro is a one-time In-App Purchase handled entirely by Apple. Apple processes the payment under its own terms and privacy policy. We receive no payment details, no name and no email address from the purchase: the app only learns from Apple whether Pro is unlocked on your Apple Account. Restore Purchases asks Apple again; it sends nothing to us.
AI agents (MCP) on the Mac#
On the Mac you can let your own AI app (for example Claude, Codex, Cursor or a local model) work on the open project through MCP.
- It is off until you turn it on, and you can turn it off or stop the agents at any time.
- The connection is local only: the AI app starts a small helper on your Mac that talks to PCB Canvas through a private local connection. PCB Canvas opens no network port and accepts no connections from other computers.
- What the agent reads from your project (parts, nets, the board) goes to the AI app you connected, and from there to that app’s AI service, under that provider’s terms and privacy policy. A local model keeps it on your Mac. PCB Canvas itself sends nothing to any AI service and we never see it.
Server and logs#
This website and the pack server run on Render in its Frankfurt (EU) region. Render keeps the server’s access logs (IP address, time, requested page or pack, browser) for [N days — confirm in Render], then deletes them. We use them only for security and to fix problems, and do not combine them with the beta list.
Your rights#
Under the GDPR you can ask for access to your data, its correction or erasure, object to its processing, and withdraw your consent at any time; write to the address above. You can also complain to the supervisory authority, in the Czech Republic the Úřad pro ochranu osobních údajů (uoou.gov.cz).
If the app or the site starts handling any other data, this page will be updated before it does.