Privacy Policy
DESKBIBO ("the Service") is a free web application operated by MRR design ("we", "us", "our"). This Policy explains what information we handle, and — just as importantly — what we never receive.
1. Our core principle: what you write never leaves your device
The single most important design decision behind the Service is that we do not receive anything you type into it.
- Your memo titles and bodies, category names, expressions and results, plans, and reminder dates are stored only in your own browser's local storage (localStorage).
- This data is technically incapable of reaching us: the Service is a set of static files with no server component that could receive it.
- As a result, we cannot read, collect, analyse, sell, or disclose the contents of your notes, calculations, or plans. Not because we promise not to — because there is no mechanism by which we could.
2. Information we do collect
To operate and improve the Service, we collect the following.
2.1 Analytics (Google Analytics 4)
- Cookie identifiers; IP address (used to estimate approximate location; not logged or stored by Google Analytics 4); pages viewed; referring source; browser, operating system and device type; approximate location; time on page; and interaction events.
- About interaction events: we record that a feature was used, never what you used it on. For example, we may record that a memo was saved and that its length fell in the 101–300 character range. We never transmit the memo's title, body, your expressions, your results, your plans, or your reminder dates.
2.2 Behavioural analytics (Microsoft Clarity)
- Click and tap positions, scroll depth, the sequence of interactions, and session recordings.
- Masking: every region that displays content you have entered — all of MEMODULE, the Calduo calculation area, Dayplot's entry fields, and the reminder picker — is masked and excluded from recording. We cannot read your content from these recordings.
2.3 Advertising (Google AdSense)
- We use third-party advertising. Advertising vendors may use cookies to serve ads based on your interests.
- These cookies may collect information about your visits to this and other sites. They do not include your name, address, email address, or telephone number.
2.4 Correspondence
- If you email us: your email address, the contents of your message, and any information you choose to include.
3. Purposes
- Providing, maintaining and improving the Service
- Understanding how the Service is used and where it confuses people
- Serving advertising and measuring its performance
- Responding to your enquiries
- Preventing abuse and complying with law
4. Legal bases (EEA, UK, Switzerland)
Where the GDPR or equivalent law applies, we rely on:
- Consent (GDPR Art. 6(1)(a)) — for analytics, behavioural analytics, and personalised advertising cookies. You may withdraw consent at any time (see section 5).
- Legitimate interests (Art. 6(1)(f)) — for the secure operation of the Service, the prevention of abuse, and responding to your enquiries.
5. Cookies and consent
- For visitors in the EEA, the United Kingdom and Switzerland, no analytics or advertising cookies are used until you consent. We implement Google Consent Mode v2.
- You can change or withdraw your consent at any time via Cookie settings at the bottom of the page.
- You may also block cookies in your browser. Every tool in the Service continues to work normally if you do.
6. Disclosure to third parties
- We do not sell your personal information.
- Information is transmitted to the providers named in section 2 (Google LLC; Microsoft Corporation) solely so that those features can function. Their handling of it is governed by their own privacy policies.
- We otherwise disclose information only where required by law.
7. International transfers
The providers above operate servers outside your country, including in the United States. Information may therefore be transferred internationally. Those providers implement safeguards such as the EU Standard Contractual Clauses.
8. Retention
- Google Analytics data: retained for 14 months.
- Microsoft Clarity recordings: retained for the period Microsoft defines. This varies by record type: ordinary session recordings are generally kept for around 30 days, while some recordings and heatmaps may be kept longer.
- Correspondence: retained for as long as needed to handle your enquiry.
Content you enter into the Service exists only in your browser. We hold no copy, and therefore no retention period applies to it. You may delete it yourself at any time.
9. Your rights
Subject to applicable law, you may request:
- access to your personal data
- rectification
- erasure
- restriction of processing
- objection to processing
- data portability
- withdrawal of consent (this does not affect the lawfulness of processing carried out before withdrawal)
- to lodge a complaint with your supervisory authority
To exercise these rights, contact us using the details in section 15.
Please note: these rights cannot apply to the notes, calculations and plans you enter into the Service, because we do not hold them. Use your browser to delete that data, or the Export function to obtain a copy of it.
10. Notice for United States residents (including California)
- We do not sell personal information for monetary consideration.
- However, the use of cookies for personalised advertising may constitute "sharing" for cross-context behavioural advertising under the CCPA/CPRA. If you do not want this, decline advertising consent via Cookie settings, or turn off personalised advertising at Google Ads Settings.
- To exercise your rights to know, delete, or opt out, contact us using the details in section 15.
11. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has provided personal information, please contact us and we will delete it.
12. External links and advertising
The Service contains advertising and links to external sites. We are not responsible for how those sites handle your information. Please review their privacy policies.
13. Security
The Service is delivered over HTTPS. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
14. Changes to this Policy
We may update this Policy to reflect changes in law or in the Service. Material changes will be posted on this page, and the updated Policy takes effect when posted.
15. Contact
- Operator: MRR design
- Email: info@mrr-design.com
- Website: https://www.mrr-design.com/
Effective date: July 20, 2026