Last updated: 27 July 2026
Deskshift is built to know as little about you as possible. You do not need an account, and your answers are kept on your own device in the first place. We do still process a small amount of data to make the service work. This notice sets out exactly what, why, who it is shared with and what rights you have. We work to the UK GDPR and the EU GDPR.
Deskshift is a trading name of MDB Next, a sole trader based in the Netherlands, registered with the Netherlands Chamber of Commerce under number 42063101. MDB Next (“we”, “us”, “Deskshift”) is the controller for the personal data processed through this website. You can reach us at plan@deskshift.pro. Use the same address for privacy questions or to exercise your rights.
No account, no profile. We ask for no name, no sign-up, and we do not follow you around with tracking cookies.
On your own device. Your intake answers are stored in your browser's local storage so you can carry on later. We do not keep them centrally on our own servers.
Only for your analysis. To build your insight and your plan, your answers go to an AI service that processes them for that and nothing else. They go nowhere else, and not to your employer.
| Data | What for | Where |
|---|---|---|
| Your intake answers (about your work, your energy, your preferences and how you feel about your job) | To build your free insight and, once you pay, your three directions and your plan | Your browser's local storage; sent to the AI service temporarily during the analysis |
| Your results after payment (your profile, the three directions and any plans you open) | So you can get back to them after closing the window, without paying again | Your browser's local storage, on this device, for up to 30 days, after which it clears itself. The "Delete my data" button removes it immediately |
| Your email address | Only if you choose to email your report and plan to yourself. With that choice we also schedule one short reminder a week later with the week two actions from your plan; nothing follows after that and we use the address for nothing else | Processed by our email provider to send those messages; the address sits there until the scheduled reminder has gone out |
| Payment data | To take your payment | With our payment provider; we never see or store card or account details |
| Technical data in server logs (including IP address, timestamp, request type) | To run the service, prevent abuse and rate-limit requests | Briefly, with our hosting and AI providers |
| An anonymous measurement of which step of the intake you reach: a random session number, the name of the step, and how many seconds after the first step. No answers, no email address, no IP address, no device data | To see where people drop out, so we can make the intake shorter and clearer | In our own database, for at most 90 days, then deleted automatically. The session number lives in your browser's session storage and disappears when you close the tab; it is known nowhere else and so cannot be traced back to you |
The intake can hold things that feel sensitive: how you feel about your job, what gives you energy or takes it away, and where you are stuck. We treat that as information you would want handled carefully. So we process it only on the basis of your explicit consent, which you give by deliberately starting and working through the intake. You never have to answer a question, and you can stop and wipe everything at any point.
We use these answers solely to build your results. We make no medical, psychological or clinical diagnosis from them, and we do not share them for advertising, profiling or any other purpose.
We never sell your data. We do use a small number of providers who process data on our behalf, purely to run the service:
Some of these providers are based in, or process data in, the United States. That means your intake answers and technical data may be processed outside the UK and the EEA. For those transfers we rely on appropriate safeguards such as the Standard Contractual Clauses, the UK International Data Transfer Addendum, and valid adequacy decisions including the EU–US and UK–US Data Privacy Framework, as applicable to each provider. By starting the intake you consent to that transfer as part of building your results.
You have the right of access, rectification and erasure, the right to restrict and to object to processing, and the right to data portability. Because your intake answers sit on your own device, the fastest route is to delete them yourself with the delete button in the intake or by clearing your browser data.
Where you have given consent, you can withdraw it at any time; that does not affect processing that already took place. For requests about data held by our providers, such as an email that has been sent or a payment, write to plan@deskshift.pro.
You also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office, in Ireland the Data Protection Commission, and in the Netherlands, where we are established, the Autoriteit Persoonsgegevens.
We use no tracking cookies and no advertising cookies. To make the intake work we use technical storage in your browser (local storage and session storage), for instance to keep your progress. That storage stays on your own device.
We do measure which step of the intake gets reached, so we can see where people drop out. That runs without a cookie and without a profile: all that is sent is a random session number, which disappears when you close the tab, plus the name of the step. Your answers are not part of it, and there is no way to link that measurement to you as a person. There is no third-party service in between that could follow you across other websites.
We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and the principle of keeping as little as possible centrally. No online service can guarantee absolute security.
Deskshift is meant for working adults and is not aimed at anyone under 16. We do not knowingly collect data from children.
We may update this notice when the service or the law calls for it. The date at the top marks the latest version. Where reasonably possible we will flag significant changes.
Questions about your privacy or about this notice? Email plan@deskshift.pro.
Deskshift · Terms · Nederlands