Privacy

What a room holds

Whatever gets typed into the form: the event name, how long it runs, the name each person gives, their timezone, and the dates and time windows they mark themselves free for. Nothing else — no email address, no password, no contacts, no access to anyone’s calendar.

The name field is free text, and it is shown to everyone else in the room. It does not have to be your real one.

The one cookie

Submitting an answer sets a cookie named ptf_ followed by the room’s ID from the link. It holds a random token and nothing else — no name, and no identifier that means anything outside that one room. It is HttpOnly, scoped to that room’s URL, and expires after seven days.

It exists so you can close the tab, come back, and edit the answer you already gave instead of adding a second one. That is the only thing it does, which is why there is no consent banner to click: it is strictly necessary for what you asked the site to do, and there is no second cookie to ask about.

Your IP address

Read from the request when a room is created, and when an answer is submitted by someone the room has not seen before. Editing an answer you already gave does not read it — the cookie identifies you by then. It is used to count how many rooms or answers a caller has made in the past hour, it lives in memory on the server that handled the request, and it is never written to the database or attached to a room, a name, or an answer.

The count stops applying an hour after the first request. The entry holding the address is cleared when that server next tidies up expired counts, or when the server itself is recycled, which is usually sooner — but neither runs on a fixed schedule, so the hour bounds the counting rather than promising when the last copy in memory goes.

Vercel, which hosts the site, keeps its own request logs on its own schedule.

What it doesn’t do

No analytics, no tracking pixels, no advertising, no third-party embeds, no social buttons. The fonts are compiled into the site at build time, so loading a page contacts nobody but this site. Nothing here is sold, shared, or used to build a profile of anyone.

How long it lasts

A room deletes itself 7 days after it is created, however far out the event is. That is a fixed limit rather than an inactivity timer — editing a room does not extend it.

Deletion takes the room, every response in it, and every window in those responses. Until a time is locked in, dates that have already gone by are dropped from stored answers on every page view, so a room still being filled in only ever holds availability ahead of it.

Once the host locks a time that pruning stops, because the room’s remaining job is to say who can still make the time that was picked — a question about the very dates a sweep would have taken out. A locked room keeps the answers as they stand until it expires, or until the host unlocks it and the next page view clears the backlog.

Who can see a room

Anyone with the link. There is no password and no membership list, so the link is the access control and is worth treating the way you would treat what is in the room: everyone holding it can read every name, timezone, and window there. The host’s copy of the link carries an extra ?k= key, which is what additionally lets them lock in a time and remove responses.

Where it is stored

The site runs on Vercel, and the database is Neon Postgres. Both process it only on this site’s instructions.

Changing or removing your answer

Open the room in the browser you answered from and the form comes back filled in; submitting again replaces what was there. To take a response out altogether, ask the host — they can remove any response but their own — or leave the room to expire.

For anything else, including a copy of what a room holds about you or an early deletion, email jbwtm0us@addymail.com. Including the room link makes it much easier to find.