Privacy & retention

Polls are private by link, not by login. Anyone who has a poll's link can see its title, description, the names of people who responded and when they're free. Share the link only with people you want to see that. Poll pages ask search engines not to index them.

• Poll details: title, description, the dates or weekdays, the time window (if any) and the creator's timezone.
• Responses: the display names people enter and the times they marked as available or “if needed”.
• Access secrets, hashed: the private manage link and each person's edit link contain random secrets. We store only a one-way hash of them. Optional passwords are stored as a salted hash too, never in plain text.
• Abuse protection: to limit spam we keep short-lived request counters tied to your IP address. They are cleared daily.
• Language statistics: to decide which languages to add, we count visits per day by the app language and your browser's language. The counts are anonymous: no IP address, no identifier, nothing linking a visit to a person.

We don't use advertising or tracking cookies. One cookie remembers your language if you choose one in Settings. Your browser keeps your manage and edit links (and the list on the My polls page) in its local storage; clearing site data removes them.

• Polls with specific dates or days are deleted 90 days after their last date.
• Polls with days of the week are deleted 180 days after their last activity, so a poll people keep using stays around.
• Every poll page shows the date it will be deleted.
• When a poll is deleted, its responses go with it. A scheduled job removes expired polls daily.

The person who created a poll can delete it at any time from its manage page, and can remove any individual response. People who responded can remove their own response using “Leave” on the poll page.