Privacy Policy

Last updated 13 October 2026

PopPlan helps groups plan who’s bringing what and who’s coming. We collect as little as we can to make that work, and we don’t sell your information or use it for advertising.

What we collect

• Hosts: your email address, used to send you sign-in links and to identify your account, plus the gatherings you create (name, description, date, time and suggested items).
• Guests: no account is needed. We store what you enter on a gathering page: your name (optional when bringing items), what you’re bringing, your party size, and whether you’re coming.
• A random guest ID: your browser keeps a random identifier (in local storage and, for RSVPs, a cookie) so you can edit your own response later. It isn’t linked to your identity, and other guests can’t see it.
• Technical information: if something goes wrong, we keep an error report (the error, the page, your browser type and a scrambled form of your IP address) for up to 30 days so we can fix it.

Who can see what

Anyone with a gathering’s link can see that gathering’s details, the names guests enter, what they’re bringing and their responses. Share links only with people you’re happy to see that. Gathering pages are not listed in search engines.

Services we use

• Supabase stores our database and handles host sign-in (servers in the EU).
• Vercel hosts the website and provides privacy-friendly visit statistics that don’t use cookies.
• Cloudflare Turnstile checks that sign-in requests come from people, not bots.
• Google Gemini writes the short comment at the top of a gathering. To do this we send it the gathering’s name, date, time and description, the items being brought or needed, and the names guests entered.
• Email delivery providers send sign-in links and service emails.

Cookies

We use only the cookies needed to run the service: sign-in cookies for hosts and the guest ID cookie described above. We don’t use advertising or tracking cookies.

How long we keep it

Gatherings and their responses stay until the host deletes the gathering. Guests can delete their own response at any time from the gathering page. Host accounts stay until you ask us to delete them, which also deletes your gatherings. Error reports are deleted after 30 days.

Your choices and rights

You can ask us for a copy of your information, or ask us to correct or delete it, by emailing hello@mail.popplan.app. If you’re a guest, tell us the gathering and the name you used. Depending on where you live, you may also have the right to complain to your local data protection authority.

Children

PopPlan isn’t intended for children under 13, and hosts must be at least 16.

Changes

If we change this policy we’ll update the date above. For significant changes we’ll let hosts know by email.