Dashwall

Legal

Privacy Policy

Last updated: 10 August 2026

This Privacy Policy explains how Flatfish Software Solutions ("we", "us") handles personal data on the Dashwall website (dashwall.io) and in the Dashwall service (app.dashwall.io). We are the data controller for the data described here.

Who we are

Dashwall is operated by Flatfish Software Solutions, based in the Netherlands. For any privacy question or request, contact us at hello@dashwall.io.

What we collect

It depends on how you use Dashwall:

  • Visitors of this website. Consent-gated analytics (see the cookies section below) and short-lived server logs — IP address and browser user-agent — kept for security and abuse prevention.
  • Account holders. Your email address, a hashed password, your plan, and the boards and tiles you configure — including the metric values your systems or agents push to your webhooks — plus metadata about machine credentials (API keys and connected applications, including when they were last used).
  • Customers who upgrade to Pro. Payment is handled by Polar as merchant of record: Polar collects your payment details under its own privacy policy. We receive your subscription status and billing metadata, never your card number.

Metric data and public display links

The values on your boards are business data you choose to push to Dashwall. Display pages are public by design: anyone who has a board's display link can view that board. We do not publish or index those links, and we use your metric data only to store and display it for you — never for advertising, profiling, or resale.

Cookies and analytics

This website uses Google Tag Manager to load Google Analytics 4, so we can see how the site is used. In countries where prior consent is required — the EEA, the United Kingdom, Switzerland, and Brazil — Google Consent Mode v2 starts with everything denied, and analytics cookies are set only after you opt in through the consent banner. Which rule applies is determined server-side from your IP address using a local GeoLite2 database; your IP is not sent to a third party for this lookup. Elsewhere, analytics runs by default. Your choice is stored in your browser (key dw_consent_v1) and can be changed at any time via the "Cookie preferences" link in the footer. Beyond this, the site sets no advertising or tracking cookies.

Why we process it, and our legal basis

  • Running your account and boards — performance of our contract with you.
  • Analytics cookies (where consent is required) — your consent, which you can withdraw at any time.
  • Security, abuse prevention, and service emails (such as a password reset or a notice about your subscription) — our legitimate interest in running the service safely.

Processors and recipients

We share personal data only with the providers we need to run Dashwall:

  • Hetzner — hosting; our servers run in EU data centers.
  • SMTP2Go — delivery of transactional email we send you.
  • Polar — payments, as merchant of record for Pro subscriptions.
  • Google — Tag Manager and Analytics on this website, consent-gated as described above.

Where a provider processes data outside the EEA, transfers rest on the European Commission's Standard Contractual Clauses or an adequacy decision. We never sell your data.

The former waitlist

Before launch, this website ran an email waitlist. It closed at launch without confirmed subscribers, and the signup data collected during pre-launch has been deleted. The signup form is no longer offered.

How long we keep it

Account data is kept for the life of your account and removed when you delete it. Metric history is capped at 500 data points per tile by design. Server logs are kept briefly for security and then discarded.

Your rights

Under the GDPR you can request access to, correction of, deletion of, or a portable copy of your data, object to processing based on legitimate interest, and withdraw consent at any time. Email hello@dashwall.io to exercise any of these rights. You also have the right to lodge a complaint with your data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

Changes to this policy

We may update this policy as the product evolves. The "last updated" date at the top reflects the latest version, and we announce material changes to account holders by email.