BBRouter
Log in Register Open BBRouter

Privacy Policy

Last updated October 26, 2026

English · Français · Español

BBRouter is a breadboard editor and simulator in the browser, at bbrouter.com, run by BBRouter, LLC (“we”, the controller of your data). This page says what we collect when you use it, why, who else handles it, and what you can ask of us. Write to contact@bbrouter.com about any of it.

What we collect

  • Your account: your email address, your username and display name, and how you sign in: a password (stored only as a one-way hash), passkeys (only their public keys), or your Google account’s identifier if you use “Continue with Google”.
  • With Google: if you choose it, Google tells us your name and email address and that Google verified the email. We ask for nothing else (no access to Gmail, Drive or contacts), and we don’t keep your Google profile photo.
  • Your email choices: whether you said yes to product updates or to the newsletter, when you did (or took it back), where, and the words you agreed to. Without a yes we only email you about your account: choosing a new password, confirming your email.
  • What you make: your projects (layouts, their versions, branches and notes), how you last looked at each one, and the share links you create.
  • Sign-in and security records: your active sessions, and a log of account events (signing up, signing in, invitations, changes made by an administrator) with the IP address and browser they came from.
  • Where you came from: on your first visit, the site that sent you (its address without the part after “?”), the campaign tags of the link you followed (utm_source and the like), the page you landed on and when. If you create an account, we keep that with it, to know which places bring people to BBRouter, and we count visits by where they came from, without who.
  • Your plan and payments: if you buy a paid plan, which one, monthly or yearly, its status and renewal date, a cancellation you asked for, and Stripe’s ids for you and your subscription. We keep our own record of each payment and refund too (its amount, tax, currency, date, status and invoice number), and of what Stripe told us about your subscription, without your name, email, address or card. Stripe takes your payment details: we never see your card number. Your billing page asks Stripe for your payments and invoices when you open it.
  • Connected tools: if you connect the Arduino IDE or an AI assistant (through BBRouter’s MCP server), the tokens that let them act for you.
  • Technical data: our servers’ request logs (IP address, page, time, response) and, when something breaks in your browser, an error report (the error and where in our code it happened, the page’s path, your browser, and your user id, or “guest”). We strip share links’ secrets and invitation codes from these before they’re stored. We also measure how fast pages load.
  • How the site is used: which pages are viewed and, on www.bbrouter.com, what is clicked and how far a page is scrolled, with your browser, the kind of device, the country you’re in (told by your IP address) and the site that sent you, but nothing stored in your browser. Visitors are counted by a code made from the IP address and the browser with a key changed every day and then destroyed: we can tell how many people came on a day, not who, nor follow anyone from one day to the next. The IP address itself isn’t kept. In the app, a page’s address is cut down to its kind (a project’s page, never its name or a share link’s secret), and we note how far you get in the Getting started course (each step done, shown or skipped), that you signed up, and the kind of file you export (a parts list, a netlist, a memory image…), never what you build or what’s in it. If you have an account, we also note a few of its steps by its id, never your name or email: signing up, its first project, its first circuit powered on, its first share link, a plan bought or left.

Why

To run the service you asked for (your account, your projects, sharing, simulation, your plan, the emails you said yes to), to keep it secure (limiting sign-ups and sign-ins, investigating abuse), and to find and fix problems. We don’t sell your data, show ads, or use it to profile you, and we don’t use your projects for anything but running BBRouter for you and the people you share them with.

Cookies and storage in your browser

We use a session cookie to keep you signed in and a small cookie naming your account to the page. On bbrouter.com, cookies also say whether you’re signed in (so the home page offers to open BBRouter) and your plan’s name (so the pricing page marks it), which version of the home page you saw while we try two, and, from your first visit, where you came from (90 days; once you have an account, only that it was kept, for a year). Your browser also keeps your preferences (language, panels, the last project you opened) and unsaved drafts. There are no advertising or third-party tracking cookies, and measuring how the site is used stores nothing in your browser. Signed out, viewing a shared link stores nothing in your browser.

Who else handles it

  • OVHcloud hosts our server and database, in North America.
  • Cloudflare sits in front of the site (delivering pages, protecting it from attacks), runs the “Turnstile” check on the sign-up page, and forwards email sent to bbrouter.com addresses.
  • Resend sends our emails, from Ireland: each one, to your address, and whether it was delivered or bounced. It keeps no list of who gets what; we do. An email about your account (a link to confirm your email or choose a new password, the welcome) waits with us until Resend takes it, and we keep which of these we sent you, when, and whether it went out, for 30 days. Every email about product updates or the newsletter has a link to stop them.
  • Grafana Labs (Grafana Cloud) stores our servers’ logs and measurements and the browser error reports described above.
  • PostHog (its EU cloud, in Germany) measures how the site is used, as described above. Your browser sends it nothing directly: it goes through our site, which leaves out our cookies.
  • Google, only if you use “Continue with Google”, under Google’s own privacy policy.
  • Stripe (Stripe, Inc., in the United States) and its affiliate Link (Sold through Link, LLC), only if you buy a paid plan: Link is our online reseller and the merchant of record for all our orders, and Stripe processes the payments. They collect your name, email address, country and payment details to charge you, work out the tax, send your receipts and invoices, prevent fraud and handle refunds, under Link’s own privacy policy. We give Stripe your email address and an id for your account, to know which account paid.

Each of them handles data only to provide its service to us. Some are in the United States or other countries than yours.

How long we keep it

Your account and projects stay until you delete them or ask us to. A deleted account can’t be signed in to and its projects are hidden from everyone, but we keep them so it can be restored if you ask, until you ask us to erase it for good; your plan’s record stays with it. Once it’s erased, our record of its payments and refunds stays for ten years, as tax law asks, with nothing linking it to you but Stripe’s ids; Stripe keeps its own records too. Server logs and error reports are kept for a few weeks. What PostHog measures names no visitor; an account’s steps there are deleted when we erase the account for good. We back up the database every night: backups on the server are kept two weeks, and we keep copies offline, access-restricted, to recover from disasters. Something you deleted can remain in those backups; ask us and we’ll tell you what remains.

What you can ask

You can ask to see the data we hold about you, to correct it, to get a copy of your projects, or to delete your account and everything in it. Write to contact@bbrouter.com from your account’s email address, or by mail to BBRouter, LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA; we answer within a month. Depending on where you live (for example in the European Union or California), the law may give you further rights, and you may complain to your data protection authority.

Children and classrooms

BBRouter is made for learners, including students. If you’re under 13 (or the age your country sets), use it only with a parent’s or teacher’s permission. A school or teacher setting students up is responsible for getting the consent their school requires. If you think a child’s account was made without permission, write to us and we’ll delete it.

Security

Connections are encrypted (HTTPS), passwords are stored hashed, the server is reachable only through Cloudflare, and administration only through a private network. No system is perfectly secure; if we learn of a breach affecting your data, we’ll tell you.

Changes

This policy may change as BBRouter grows. We’ll update the date above, and tell you by email or in the app before any change that matters to you takes effect.