Privacy Policy

Overview

19people.com (the "Service") helps groups pick a date with minimal friction and minimal data. This is a personal project focused on privacy-first scheduling.

What data is collected

Event Data

• Event details (title, description, date/time options, optional organizer name)
• Participant responses (votes and optional names)
• Secure admin tokens for event management

Technical Data

• Standard server logs (IP address, browser info) for security and troubleshooting
• Temporary identifiers in your browser to remember your votes
• Bot protection data via Cloudflare Turnstile

Optional Features

• Email address when you request links be sent to yourself (processed for delivery only, not stored)

Cookies & Storage

• Security cookies to protect against attacks
• Admin session cookies for event management
• Local browser storage for your voting preferences

Advertising

Google AdSense displays ads on content pages. Google collects data for ad personalization which you can control at www.google.com/settings/ads.

Data retention

• Events and votes: Automatically deleted 15 days after creation
• Admin access: Expires after 30 days
• Server logs: Typically under 30 days
• Email addresses: Not stored in database

Third-party services

These services help run the site:

• Supabase: Database hosting
• Cloudflare: Website hosting and security
• Resend: Email delivery
• Google AdSense: Advertising

Personal information is never sold.

Your rights

You may have rights to access, correct, or delete your data depending on your location (EU/UK GDPR, California CCPA/CPRA, Australian Privacy Act).

Security

The Service uses industry-standard security measures including encryption, secure tokens, and rate limiting. Keep your event links private—anyone with the link can participate.

Children

Not directed to children under 13.

Contact

Privacy inquiries: privacy [at] 19people [dot] com