Privacy
This page describes exactly what the service does today. It is written by the person who builds it, not by a lawyer, and it will be updated whenever the behaviour it describes changes.
The file you upload
An uploaded project file is passed straight to the component that reads it and is never written to disk or to the database. It exists only in memory for the duration of the request. What is kept - and only if you are signed in and chose to save the plan - is the extracted schedule: task names, dates, durations, resource names, dependencies and notes. The original file is not recoverable from it.
If you are not signed in, nothing about the plan is stored at all. Closing the tab ends it.
What is stored when you have an account
| Data | Why | How long |
|---|---|---|
| Email address | Signing in, password recovery, service notices | Until the account is deleted |
| Password | Signing in | Stored only as a bcrypt hash; the password itself is never kept |
| Saved plans | Returning to a plan, sharing a link | Until you delete them |
| Sharing password | Protecting a shared link | Stored as a bcrypt hash; removed when sharing stops |
| Subscription state | Access to paid features | Until the account is deleted |
Cookies and local storage
We use cookies to support sign-in, protect forms, and remember access to password-protected plans. A session cookie contains a random identifier linked to session information on our server. We also use local storage to remember your theme and when you dismiss the sharing prompt.
Our Cookie Policy lists each item, its purpose, how long it lasts, and how to clear it. We do not use analytics or advertising trackers.
Logs
Each request is logged with its method, address, response code and duration. Password-reset links are redacted before writing. Logs have a fixed size: the oldest lines are overwritten as new ones arrive, and logs are not copied anywhere else.
Your network address is used to limit how often plans are opened, files are uploaded and sign-in attempts are made, and the email address typed into the sign-in, sign-up or password-reset form is used the same way. Both are held in memory only and are discarded within minutes.
Who else sees the data
Email is delivered by Resend, which receives your address and the message text in order to send it. No other third party receives anything.
A public or password-protected link is readable by anyone who has it. That is what sharing means; make it private again at any time and the link stops working immediately. Shared plans are excluded from search engines.
Your choices
Delete any saved plan from your projects at any time. To remove the account itself along with every plan and share link, use Delete account on the account page - it takes effect immediately and needs nobody's help. The database is backed up every night and the 30 most recent copies are kept, so a deleted account leaves the backups as those copies are replaced, normally within 30 days. If something is not working, write to support@viewmpp.com.
Contact
Questions about this page, about what is stored, or a request to remove something:
support@viewmpp.com.
Mail sent from noreply@viewmpp.com is automated and is not read.