Privacy policy

Example page – the controller details below are placeholders, but the description of data processing matches this software's actual default behaviour. Please review it and add whatever your specific deployment needs before going live (e.g. if SMTP delivery is enabled or the retention period was changed).

Data controller

Jane Doe
Sample Street 1
12345 Sample City
Germany
Email: kontakt@example.de

What data we process

• When creating a poll: title, description, proposed times, and the organizer's name and optional email address.
• When voting: the name you give, your Yes/Maybe/No answers for each time, and any optional comment.
• Technical: a session cookie and an edit-token cookie (see "Cookies" below), plus a salted hash of your IP address for short-lived abuse detection (rate limiting) — the raw IP is never stored.

Purpose and legal basis

Processing exists solely to run the scheduling poll you created or answered (Art. 6(1)(b) GDPR), and to protect the service from abuse via rate limiting (Art. 6(1)(f) GDPR, legitimate interest in a working service). If the optional email notification is enabled, sending it is based on the organizer's interest in being informed.

Cookies

A session cookie protects the form token against cross-site request forgery (CSRF). It is strictly necessary, contains no personal data, and expires when the browser session ends.

After your first vote, a random edit token is set as a cookie (valid for about 180 days, scoped to that one poll, HttpOnly, SameSite=Lax, and Secure over HTTPS). It lets you change your own answer later and is likewise strictly necessary.

Retention

Polls are automatically deleted, together with all answers and comments, 60 days after the last proposed time. Organizers can delete a poll manually at any point before that.

Third-party disclosure

No data is shared with third parties. If email notifications are enabled, the message is sent through the operator's own configured SMTP server. No external fonts, analytics, or tracking services are embedded.

Your rights

You have the right to access, rectify, erase, or restrict the processing of your personal data, to object to it, to data portability, and to lodge a complaint with a data protection supervisory authority.

Hosting and server logs

Visiting this page inevitably makes the web server process access data (e.g. IP address, timestamp, requested page) in server logs. The details depend on the specific hosting setup and should be filled in by the operator here.