This notice covers applications for Harbour research interviews and possible future design-partner testing.
Who runs this research
The data controller is Jason Croghan, based in Dublin, Ireland.
Research enquiries: research@harbour-app.org
Privacy and deletion requests: privacy@harbour-app.org
Why I collect this information
I am researching how small groups keep track of decisions, files, tasks and project context across chat and other tools. I use interview applications to:
- decide who is a useful fit for a research interview;
- contact applicants and arrange interviews;
- understand common coordination problems;
- identify people who may want to test an early prototype later; and
- protect the form from spam and automated abuse.
I do not sell application data, use it for advertising, or use it to train shared AI models.
What the form stores
The form may store:
- your preferred name and email address;
- your role and the type and size of your group;
- the tools your group currently uses;
- the coordination problem you describe;
- the platforms your group needs;
- whether you are willing to take part in an interview;
- whether you are interested in future prototype testing;
- the date of your application and the privacy-notice version you accepted; and
- an internal status such as new, contacted, interviewed or deleted.
hCaptcha and abuse prevention
The form uses hCaptcha, provided by Intuition Machines, Inc., to reduce spam and automated submissions.
When the form is open, hCaptcha may receive technical and interaction information such as your IP address, browser and device information, and details of how you complete the challenge. Its processing is described in the hCaptcha privacy policy and terms of service.
The Harbour application does not store your raw IP address or hCaptcha response token. It stores only short-lived, pseudonymous rate-limit records used to prevent repeated submissions.
Hosting
The website, MariaDB database and project email are hosted by Zume in the United Kingdom.
Zume may process normal hosting data such as IP addresses, timestamps, requested pages, browser details and error information. Access and error logs are typically retained for up to 30 days. Backups are also retained for up to 30 days.
Zume’s support address is support@zume.net. Privacy requests about Harbour should be sent to privacy@harbour-app.org.
Legal basis
I rely on your consent to receive, review and respond to your interview application, and to contact you about future design-partner research where you ask for that.
I rely on legitimate interests for proportionate security, abuse prevention, rate limiting and basic operational logging.
You can withdraw consent at any time by emailing privacy@harbour-app.org.
How long I keep it
- Applications that do not progress: deleted within 90 days of submission or the last relevant contact.
- People interviewed but not continuing: identifiable recruitment records deleted within 90 days after the interview, unless they separately ask to hear about future research.
- Active design-partner candidates: kept while the relationship is active, reviewed at least every six months, and deleted within 90 days after it ends unless a longer period is legally required.
- Rate-limit records: automatically removed after their short technical window.
- Zume logs and backups: typically retained for up to 30 days.
If an older backup is restored, records that had already been deleted will be deleted again.
International processing
I am based in Ireland. Zume hosts the website, database and email in the United Kingdom. hCaptcha is operated by a United States company and may process data in the United States or other locations described in its public privacy documentation.
Your rights
Depending on the circumstances, you may have the right to access, correct, delete, restrict or object to the use of your personal data, to withdraw consent, and to receive data you supplied in a portable format.
To make a request, email privacy@harbour-app.org. Please do not send identity documents unless they are genuinely needed; I may ask for reasonable information to confirm that the request relates to you.
You may also complain to the Irish Data Protection Commission.
Cookies and automated checks
This site does not use advertising cookies, behavioural analytics, session replay, social-media pixels or third-party advertising.
hCaptcha may use cookies, browser storage and automated processing to decide whether a submission appears to come from a person rather than a bot. If hCaptcha prevents you from applying, email research@harbour-app.org.
Security
The application is designed to use HTTPS, server-side hCaptcha verification, strict form validation, prepared database queries, restricted database credentials, private configuration outside the public web directory and rate limiting without storing raw IP addresses.
No internet service can guarantee perfect security, so please do not send highly sensitive or irreplaceable information.
Children
This research is for adults aged 18 and over. Applications from children will not knowingly be retained.
Changes to this notice
If the form, providers or research process changes materially, this page will be updated with a new date and version.