Privacy

Last updated: Oct 27, 2026

In short: we keep only what your group puts in the calendar, on Cloudflare. Nothing is sold. There are no ads and no trackers. The group organizer can delete the whole group at any time.

What we store for each group

• Group name, time zone and the 8-character group code.
• The group PIN and organizer PIN, only as salted one-way hashes. We can't read your PINs.
• Tabs (person or team names, emoji and color).
• Events: title, date and time, place, notes, repeat settings, spot limits, and the name of the person who made the event.
• To-dos, including checked ones in Completed.
• RSVP names: the name you type when you tap I'm in, Maybe or I'm out.
• Ink images: handwritten notes and notebook pages, saved as pictures.
• Linked calendar (ICS) links, if someone links a Google, Outlook or iPhone calendar to a tab. The link is kept on the server and never shown on screen. A copy of that calendar's upcoming events is cached for up to 30 days. We only read these calendars and never change them.
• Push subscriptions, if you turn on 🔔 alerts on a device: the browser's push address and keys, which tabs you want alerts for, the device label and the name you RSVP with. Alerts are delivered through your browser's own push service (Apple, Google or Mozilla).
• Recently deleted events, to-dos and tabs, kept for 7 days so they can be restored.
• Feedback you send from ⚙️ Group → Send feedback: your message, the optional name or email you add, your group code and name, the time, and your browser type. Feedback is kept separately so we can read it, even if the group is later deleted. Email us to have it removed.

On your device

Your browser keeps a sign-in cookie for the group (and a short-lived organizer cookie if you unlock organizer mode). It also keeps a copy of the calendar so it works offline, the name you RSVP with, and a private key that proves which events you created. 🔒 Lock this device clears these. We don't use tracking or advertising cookies.

Where it lives

Everything is stored on Cloudflare (Cloudflare Pages and Workers KV), which hosts the app. Cloudflare handles the network traffic, as any host does. Each group's data is kept under its own group code, and you can only open it with that code and PIN. Your IP address is used briefly to limit wrong-PIN guesses and spam. Those counters delete themselves within about an hour.

What we don't do

• We don't sell or rent your data, and we don't share it with advertisers.
• There are no ads, no analytics and no third-party trackers or scripts.
• We don't read your calendars for any purpose other than showing them to your group and sending the alerts you ask for.

Who can see it

Anyone who has your group code and PIN can see and edit the group's calendar, so share them only with people you trust. Changing the group PIN signs everyone else out.

Deleting your data

• Anyone can delete their own events and to-dos. Deleted items are removed for good after 7 days.
• The group organizer can remove a tab or linked calendar, or delete the whole group in ⚙️ Group → Delete this group. That removes the group's events, to-dos, RSVPs, notes, ink images, linked-calendar links and caches, and alert sign-ups right away.
• To stop alerts on a device, turn off 🔔 alerts on that device. Alert sign-ups are also removed when the group is deleted.

Contact

Questions or deletion requests: familywallcalendar.app@gmail.com