What Quest Board keeps
- People: a username, a display name, an optional email address, and a PIN — stored only as a salted hash. Nobody, including whoever runs the board, can read a PIN back.
- Boards: the lists a household writes, who is on each, and every tick — what, when, by whom (and, on the shared wall screen, that it was the wall). Daily habits keep a per-day history so a person can see their own trends and download them.
- An activity log of who changed what, kept for about a year, visible to the household's superuser.
Google Calendar, if you connect it
Connecting is optional and per person. Quest Board asks Google for exactly two read-only permissions: the list of calendars you subscribe to and the events on them. It never asks to change, create, share or delete anything, and cannot.
With that, Quest Board:
- reads your calendar list once (and again when you press Reload calendars) and keeps each calendar's name and colour, plus your two choices for it: whether it shows, and under which household member;
- reads the events for the week being looked at — title, start, end, location, the calendar they are on and a link to them — and keeps that week in a short-lived cache (refreshed after ten minutes, gone after eight hours) so every screen in the household can show it without asking Google again;
- stores the credential Google hands out (a refresh token) encrypted, so it can read your calendar while your phone is asleep. It is decrypted only inside the running application, only to talk to Google.
Calendar data is shown to your household: on your own pages, and on the household's wall screen under your name (or under the household member you point a shared calendar at). It is used for nothing else — not analysed, not sold, not shared with anyone outside the household, not used for advertising, and never used to train anything.
Quest Board's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting, and deleting
- Disconnect any time from your calendar page: Quest Board tells Google to revoke its access, deletes the stored credential and your calendar choices, and stops showing your calendars anywhere — including under anyone you had pointed one at. The cached week expires on its own within eight hours. You can also revoke access from your Google Account's third-party access page.
- Leaving the household: when a superuser removes a person, their daily board and its history are deleted with them; boards they made pass to that superuser.
Where it runs, and cookies
Quest Board runs on Cloudflare Workers; its data lives in Cloudflare's key-value store for this
deployment (quest.joino.io). It sets one cookie, qb, which says who is signed in
(or that a screen is the household's wall) and nothing else. No analytics, no third-party scripts, no
tracking pixels.
Who to ask
The person who runs this Quest Board — the household's superuser — can answer questions, remove a person, or delete a board.
Last changed 17 August 2026.