What timevenn keeps, and why

timevenn helps a group find a date or time. It is a side project run by one person and hosted in the European Union. This page says what data it holds, what for, and for how long. There is nothing else going on behind it: no advertising, no profiling, no selling of data.

Accounts

An account stores your nickname, email address, a hash of your password, your time zone and display preferences, and the one notification channel you chose (email, a Telegram chat, an ntfy topic or a Pushover user key). The email address is used to sign in, to verify the account, to reset the password and to send the notifications you asked for. If you sign in with Google, GitHub or Discord, the account also keeps which provider it is and the id that provider gave you, nothing else; the provider itself learns that you signed in to timevenn. The account exists until you delete it from your profile; then it goes with every event you own.

Events and answers

An event holds the name, description, place, dates or hours and settings its owner entered, the answers of everyone who took part, and the messages the owner sends them. Answers are visible to the owner and, when the owner allows it, to the other participants. An event stays until its owner deletes it, which removes its options, participants, answers and messages at once; owners can also delete their whole account.

Guests

Voting without an account stores the name you chose, your answers, and a hash of your personal link. An email address is optional: if you leave one, it is used only to send you that link, the reminder the owner may switch on, and the final choice. Guest data goes with the event. A personal link that was opened but never claimed is deleted after a day.

Cookies and storage

The site sets two cookies, both needed for it to work: one keeps you signed in, the other stops other sites from sending forms in your name. There are no tracking cookies, so there is no banner. On the sign-up, password reset and contact forms, Cloudflare Turnstile checks that you are not a robot; it is the only script that comes from outside the site.

Visits are counted by our own copy of Umami, on our own server: the pages seen, the site a visit came from, the country, region and city worked out from the IP address, the browser, system, device, screen size and language, how fast pages load, and a few outcomes such as an event created or a vote saved. Umami sets no cookie and does not store the IP address. It can recognise the same browser within a calendar month, not beyond.

The browser keeps a few preferences on your device (the last brush you used, the grid view you prefer, the theme); they never leave it.

Messages we send

Emails go out through our mail provider. If you choose Telegram, ntfy or Pushover, the messages you asked for go through that service under its own terms; you can switch channel at any time from your profile.

Who else sees data

Traffic passes through Cloudflare, which protects the site and runs the robot check on the sign-up, password reset and contact forms. The server is in the European Union. Apart from Cloudflare, the mail provider, the notification service you chose and the sign-in provider you used, nobody receives your data; it is never sold or shared for marketing.

Your rights

You can see and change what your account holds from your profile, and delete the account yourself. For anything else, including data held about you as a guest, write to us through the contact page and we will answer within a month. If you are in the EU, you may also complain to your data protection authority.

Contact · Terms