Privacy

Last updated: 27 September 2026.

Who operates the demo?

Dennis Dumin, Tepeweg 11, 45897 Gelsenkirchen, Germany. Questions and requests: contact@dennis-dumin.net.

Guest workspaces

No registration, email verification or real user profile is required. Starting the demo creates a separate workspace with fictional people. Any board, task or comment you enter is saved on the demo server so you can test the application. Do not enter personal, confidential or real business information.

The demo uses a session cookie and a CSRF security cookie, limited to this host. These are needed for access control and protection against forged requests. There are no advertising or analytics cookies. The session lasts at most 24 hours. Logging out deletes the workspace immediately. Expired workspaces are removed by a cleanup job that runs every five minutes; access is already blocked when the session expires.

Hosting and technical data

The application is hosted on an OVHcloud VPS in Germany. As with any website, your IP address and connection details are processed to deliver content and protect the server. The demo uses a keyed hash of the connecting IP address for short-lived request limits, stored in server memory for up to one hour. The application does not enable a regular HTTP access log. Infrastructure security logs and the hosting provider's own processing are separate from the workspace deletion schedule.

Infrastructure backups may retain an earlier copy after a workspace has been deleted from the running application. The server uses the provider's standard daily backup with one rotation. After a restore, expired workspaces are removed before resuming access.

Purpose and legal basis

Processing necessary to provide and protect this non-commercial portfolio demo is based on legitimate interests under Article 6(1)(f) GDPR: demonstrating the software and preventing misuse. Only technically necessary browser storage is used.

External services

This KanMind demo does not send emails, call an AI service, or embed external videos. Fonts and chart scripts are delivered from the same server. External links, including links to the portfolio, are only followed when you choose to open them.

Your rights

Where personal data is involved, you may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. You can also complain to a data protection supervisory authority. Contact the operator at the address above; please do not send passwords or session cookies.