What this app keeps
Mission Board is a small board where people post errands and other people take them on. Doing that means telling it some things about yourself. This is what it keeps, who can see each part, and how to take it back.
Signing in
You sign in with an email address and a password, or with Google. Your address is stored so you can sign in again, and it is never shown to anybody else on the board.
The password is never stored as you typed it. It is put through a one-way hash by Supabase, the service that holds the accounts, and neither this app nor anybody running it can read it back. If you sign in with Google instead, the app never sees your Google password at all — Google confirms who you are and hands back your address and an account identifier.
It does not take your name or your photograph from Google. You choose a display name when you arrive, and that is the only name anybody here sees.
What you write
- Missions — the title, the description, what you are offering, and any deadline. Anyone signed in can read a mission that is on the board. A mission you unlist is visible to you alone.
- Messages — every mission has a public half, which anyone signed in can read, and a private half between the poster and whoever took it on. Nobody else can read the private half, including somebody who takes the mission on later.
- Photographs — location and camera data are stripped out of every photograph before it is stored. A photograph is visible to whoever can see the mission it belongs to.
- Recaps — what each person writes afterwards about a finished mission, and the shared album. Visible to anyone who can see the mission.
- Private conversations — anyone signed in can write to you directly, and those messages are stored. They are visible to the two of you and to nobody else. Somebody you have not replied to can send you exactly one message; replying is what lets them send more.
You can block somebody, and it works in both directions. You stop seeing them and they stop seeing you: the conversation leaves both lists and neither of you receives anything the other writes in it, and each of you disappears from the other’s board, search and map. They can no longer open your profile. You can still open theirs, because you have to be able to find somebody to unblock them.
Live work between you is ended first, through the ordinary rules: if you were holding one of their missions it is abandoned, and if they were holding one of yours they come off it. Anybody else on that mission keeps their place and the mission stays on the board.
Nothing says the word. There is no notice, no marker, and no way to ask who blocked whom — a block is readable only by the person who made it. But it is not a secret either: somebody whose missions and profile all vanished at once can work out what happened, and the alternative was leaving them able to see you.
What a block does not do is change what either of you has finished. A mission you two completed together stays visible to both of you, and both records keep it. Nothing already said is deleted. Unblocking brings their missions back; the conversations stay removed.
You can also remove a conversation. That takes it out of your list only. The other person still has theirs, nothing is deleted, and if they write again it comes back.
A conversation can be reported, in the same way a mission or a person can. A report is readable by whoever runs the app and by nobody else, including its subject. Nothing follows from one automatically.
Places
This is the part worth reading twice, because the app keeps two different things and shows them to different people.
- The area — every place shown on a map is snapped to a grid of roughly 500 metres before anyone sees it. That is what the circles mean: somewhere in this square, not here. Maps do not zoom past the point where that would stop being true.
- The exact address — kept for the person who posted the mission, and shown to nobody else at all. Not to whoever takes the mission on. If an exact address needs to be given, a person gives it in the conversation.
The “near me” button asks your browser for your position. It moves the map and is not stored.
Who else sees it
Running this app means other companies handle some of it.
- Supabase holds the database and the photographs, in the United States.
- Vercel serves the pages.
- Google confirms who you are when you sign in.
- Stadia Maps draws the maps, and answers the address box as you type. What you type into an address field is sent to them.
- OpenStreetMap answers a whole address search, when the box is not suggesting as you type.
- Sentry is told when something breaks. It is deliberately given no account details and no addresses: map positions and profile identifiers are stripped out of the report before it is sent.
Nothing here is sold, and nothing is used to advertise to you. There is no analytics or tracking on this app.
Taking a copy
Settings has a Download my datalink. It gives you one file holding everything this account can see about itself: your profile, the missions you posted and the ones you took on, what you wrote in them, your conversations, your reviews and recaps, and the log of what you did.
It is assembled with your own permissions, which has one consequence worth saying: it contains what you can see, not everything the database holds with your name on it. A report somebody filed about you is not in it, because you cannot read it — it names whoever wrote it. Photographs are listed by name rather than included, because a file with a hundred photographs inside it is not one anybody can open.
Leaving
Settings has a Leave button. Take a copy first if you want one — leaving does not send you anything. Pressing it:
- takes your open missions off the board, and steps back from any you had taken on;
- deletes anything you had not posted yet, and its photographs;
- scrubs your display name;
- stops you signing in again.
What it does not do is erase your finished missions, or your private conversations. A completed mission is part of somebody else’s record as much as yours — their count of what they have done, the conversation they had, the recap they wrote — so it stays, with your name gone from it. The same is true of the log of what happened to each mission, and of anything you said to somebody privately: it is their conversation too.
If you want something removed that leaving does not remove, say so and it will be dealt with by hand.
This is a prototype
It is small, it is new, and it is run by one person. It has not been audited. Do not put anything here you would be badly hurt by losing or by somebody else reading.