Privacy Policy

What this notice covers

This Privacy Policy explains how Sen Zhang, the creator of EnneadTab, handles personal information when you use the Service described in the Terms of Service. It applies to enneadtab.com and to features Sen Zhang operates there. It does not change the privacy terms of your employer, of Microsoft, Google, Autodesk, McNeel, or of other products you use alongside the Service.

Information we collect

Account and sign-in.

• Name, work email, and, if you set one, a nickname. Email sign-in is limited to allowed work domains (such as @ennead.com and @cannondesign.com).
• A password only if you create an email login. It is stored as a PBKDF2-HMAC-SHA256 hash. The plaintext password is not stored.
• Profile image, if you set one. The image bytes stay on the server; the session carries only a short URL.
• Identifiers from Microsoft Entra ID when you use organization single sign-on, including the tokens needed to keep you signed in.
• Google account identifiers only if you use the allowlisted administrator emergency sign-in.
• Email verification codes for signup and password reset. Only a hash of the code is stored, and the code expires.

Use of the Service.

• Game and profile fields on your account, such as quacks, coins, hat inventory, last-seen time, duck position, and short chat messages. Chat is visible to other people in that feature until it expires.
• Leaderboard display name and totals, which other signed-in users can see.
• Your name and email, passed to a proxied EnneadTab application so it can recognize a signed-in user.
• Desktop-plugin approval tokens, which are signed and short-lived. The plugin does not keep a long-term password.
• Error reports (what failed, where, and a stack trace) sent to the ErrorDump telemetry service so failures can be fixed.
• Product counters. A download or visit may be counted with a daily hash of IP address, browser, and product. The raw IP address is not stored in that ledger.
• Vercel Web Analytics and Speed Insights: page views, performance, referrer, browser and device class, and approximate geography, as those products collect them.

On your device. The Service stores preferences in browser storage, such as sound, performance tier, last sign-in method, and whether you have dismissed an intro. A demo-mode cookie may be set if you enter a demo. Those values stay in your browser unless a feature you use sends them.

Camera

Gesture and face control is optional. When you turn it on, the browser asks for camera permission and the video is processed on your device. EnneadTab does not upload that camera video. You can deny the permission or turn the feature off.

AI features

If you use an AI feature, the prompt and the context that feature includes (which can include model information you asked it to read) are sent to Google's Gemini API to generate a response. Do not submit secrets, client information, or other material you are not allowed to send to that provider. Google's terms and privacy policy govern Google's handling of that submission.

How we use information

• to sign you in and keep your account, including linking an email login with organization single sign-on on the same email;
• to run the feature you used, including proxied applications, plugins, the duck game, and AI responses;
• to secure the Service, limit abuse, and diagnose errors;
• to count product use in aggregate;
• to send a verification or reset code you requested;
• to comply with law and to enforce the Terms of Service.

The Service is an internal professional tool. The legal bases for people in jurisdictions that require one are: providing the Service you asked for, legitimate interests in securing and operating it, and consent where a feature asks for it (such as the camera).

How we share information

Sen Zhang does not sell personal information. Sen Zhang does not share it for cross-context behavioral advertising.

Information is shared with service providers only as needed to run the Service:

• Vercel, for hosting, the database, Web Analytics, and Speed Insights;
• Microsoft, when you sign in with Entra ID;
• Google, for Gemini responses and for allowlisted administrator Google sign-in;
• the EnneadTab email gateway, to deliver a code you requested;
• ErrorDump and other EnneadTab services that receive an error report or a proxied request you made.

Other signed-in users can see leaderboard names and totals, and duck-world chat until it expires. Your employer may be able to see records it already controls, such as your organization's Microsoft sign-in logs. Sen Zhang may also disclose information if required by law, or to protect the Service, users, or Sen Zhang's rights.

How long information is kept

Account records are kept while the account exists. Verification codes expire and are not reused. Duck chat expires on a timer. Product-metric hashes are stored by day and are not a lasting identifier across days. Session length follows the sign-in cookie, which is set for up to 60 days. Error reports are kept under ErrorDump's own retention. You may ask for deletion as described below; some records may remain where needed for security, legal, or backup reasons, and are then deleted on the ordinary cycle.

Security

The Service is served over HTTPS. Passwords and verification codes are stored as hashes. Desktop plugins use signed tokens rather than a password stored on the machine. No method of transmission or storage is perfectly secure, and Sen Zhang does not guarantee absolute security.

Your choices and requests

You may stop using the Service, decline the camera permission, and clear browser storage. To ask for access, correction, export, or deletion of personal information Sen Zhang holds about you, email szhang@ennead.com from the address on the account. Sen Zhang may need to confirm it is your account before acting. If a law gives you additional rights — including rights to object, to restrict processing, or to complain to a regulator — you may exercise them by the same email. Sen Zhang will not deny the Service solely because you exercised a privacy right, except where the Service cannot function without the data (for example, an account needs an email).

Work accounts may also be governed by your employer's policies. A request about organization single sign-on records held by Microsoft or your employer should go to them as well.

Children

The Service is a workplace tool for adults. It is not directed to anyone under 18, and Sen Zhang does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, email the contact address and it will be deleted.

Where information is processed

The Service is hosted in the United States (Vercel region iad1). If you use it from somewhere else, your information is processed in the United States and in the locations of the providers listed above.

Changes

Sen Zhang may update this policy by posting a new version on this page and changing the effective date. The version in effect on October 1, 2026 is the first published version.

Contact

Privacy requests go to Sen Zhang, creator of EnneadTab, at szhang@ennead.com.