INFORMATION / UPDATED 6 JANUARY 2026

Privacy policy

Your dashboard runs locally. Here is what that means—and what it does not mean—for your information.

1. Scope and operator information

This policy describes the supplied static MetricBoard website at showmeadowlistlm.skin. The displayed operator, Showmeadowlistlm Analytics Ltd, company reference MB-DEMO-2026-001, and the London address are illustrative deployment details. They do not establish a registered company, verified controller or staffed office. A live operator must replace and verify these details, the contact mailbox and hosting disclosures before collecting personal information through a production service.

2. Dashboard information and device storage

Revenue, expenses, sales, targets, customer counts, visit counts, custom KPIs, widget order and date filters are processed by JavaScript in your browser. CSV files are read on your device and are not uploaded by this application. The workspace is saved in localStorage so it can be restored on a later visit. We do not receive a server-side copy through the supplied application code.

Do not import customer names, identifiers, payment details or other sensitive personal information. Local storage is not encrypted by the application and is accessible to someone using the same browser profile. Your device security, browser extensions and downloaded exports remain important privacy considerations.

3. Website access and contact information

A web host may process request information such as IP addresses, timestamps, requested paths and browser headers when serving these files. The supplied build does not specify a hosting provider or its logging configuration. The deploying operator must identify those arrangements and applicable retention periods. The contact form validates locally and prepares an email draft; it does not send a submission to a website server or save contact fields in localStorage.

If you choose to send that draft, your email service and the recipient's service process your address and message under their respective arrangements. Send only information necessary for your enquiry. There is no account creation, advertising profile or payment collection in this build.

4. Cookies, processors and legal bases

No analytics, advertising scripts, external fonts or third-party embedded maps are included. The application uses browser localStorage rather than setting HTTP cookies. It remembers your privacy choice and requested workspace. Read the cookie policy for the storage inventory. Accepting optional categories does not activate services that are not installed.

Where a live operator processes correspondence or security logs, it must establish an appropriate legal basis, such as responding to requested pre-contractual assistance, a legitimate interest in secure operation or compliance with a legal obligation. Optional tracking would require appropriate disclosure and, where required, prior consent. No specific third-party processor or international transfer arrangement is asserted by this static build.

5. Retention and deletion

The local workspace remains until you clear it, delete this site's browser storage or your browser removes it. Clear workspace replaces saved dashboard data with an empty workspace while preserving the privacy preference. Privacy preferences have no automatic expiry in this build. Downloaded files are separate and must be deleted from your device or shared storage yourself. No server-side contact archive is created by the form. A future live operator must disclose a justified retention schedule for received email and access logs.

6. GDPR and CCPA rights

Depending on your location and the law's applicability, you may have rights to access, correct, delete or obtain a portable copy of personal information, restrict or object to processing, and withdraw consent without affecting prior lawful processing. California residents may have rights to know, delete, correct and opt out of qualifying sale or sharing, without unlawful discrimination. This build does not sell or share personal information for behavioural advertising.

You can directly export or remove locally stored dashboard data. For operator-held information, use [email protected], the designated privacy and DPO-enquiry contact; the mailbox is a deployment placeholder and no statutory DPO appointment is claimed. A verified live operator may request proportionate identity verification. You may also complain to your relevant data protection authority, including the Information Commissioner's Office where appropriate.