Canteen Board
Privacy
Canteen Board hosts a lobby board for each post. This page describes the service. The board address also has a privacy page for that post.
What a board stores
Each post has its own board. The officer desk and the television read that board. We store:
- Officer desk accounts: a username, a display name, a role, and a password hash with a salt. Guests do not get accounts.
- Board settings: the post name, address, phone, website, colors, which parts of the board are on, the layout, the link codes, a Facebook Page id, and a review email.
- Events, weekly hours, quotes, news, announcements, and albums.
- Photographs, with a caption, the uploader’s name, and the storage key. An officer approves a guest photo before it goes on the television. We keep resized copies of each photo for the board and do not keep the original file. Your board keeps your newest 2,000 photos. Older ones are removed automatically. Mark a photo Keep to hold on to it.
- Feedback notes, with the note and an optional name and contact. Notes go to the officers. They are not shown on the television.
- Hall rental details, requests, photos, and blocked dates, when that add-on is on.
- Email subscribers and the outbox for a member blast, when the post uses them.
- Guest sign-in visits, member birthday and anniversary dates, television pair codes, and phone alert codes.
- A calendar link, cached Facebook posts when a Page is connected, and short-lived login and rate-limit rows.
The platform record
The sign-up list is separate from the television board. It holds the organization, the contact name, email, and phone, a tax ID if one was given, and the IP address of the sign-up. Billing rows hold the trial dates, the price, whether the board is marked paid, and the date a board was deleted. Kit orders, done-for-you setup, and district bundles are queued there too.
What leaves the service
- Transactional email goes through Resend. That includes the welcome note, password reset, photo and comment alerts, an optional member blast, and birthday notices. Mail is sent from alerts@ on the mail domain for this service.
- If a post sets a Facebook Page id and the service is connected, the board can read that Page and, when an officer turns publishing on, send a post to Facebook.
- Weather comes from the US National Weather Service. We send the board's coordinates only.
- Public forms can use Cloudflare Turnstile: sign-up, a hall request, a subscriber, setup intake, and the guest book when a site key is set.
- The service runs on Cloudflare: Workers, D1, R2, and a queue.
What we do not do
The television app has no advertising kit. We do not sell photographs, notes, or desk accounts.
Export, retention, and deletion
An admin on the officer desk can download a JSON export of the board (settings, events, hours, notes, and photo metadata, with links to the photographs). The trial is 60 days. When an unpaid trial ends, or when an admin cancels from the desk, we keep the board for 90 days. We email the address that opened the board about 14 days before deletion and again about 3 days before. Then we delete the board’s content. During those 90 days the television shows a paused page and the desk stays open for the export.
The operator’s Delete control removes a board immediately. That is for abuse and for operations. It does not wait 90 days.
Questions: hello@canteenboard.com
Canteen Board is not affiliated with the Veterans of Foreign Wars or any other organization.