Privacy Policy

Last updated: June 2026

This explains what GroupCal collects, why, and who can see it — in plain language.

What we collect

• Account: your name, email address, and password (stored only as a secure hash).
• Calendars: the names and descriptions you write.
• Events and attendees: event details, and the names — plus any optional contact info — people add when they join.
• Technical: basic server logs and a single session cookie to keep you signed in.

How we use it

We use your information to run the service and to send transactional email — email verification, event reminders, and messages you choose to send an organizer. We don’t show ads and we don’t sell your data.

Who can see what

Calendars are unlisted: they’re kept out of search engines and are reachable only through their link. An attendee’s contact info is shown only to the calendar’s hosts, never to other attendees.

Service providers

We use Resend to deliver email, and Fly.io to host the application and database. They process this data on our behalf to provide those services.

Cookies

We use one essential cookie to keep you logged in. We don’t use analytics or advertising cookies.

Data retention

Sessions expire automatically. Your account and calendar data is kept until you ask us to delete it.

Your choices

You’re in control of your own data: delete your account and everything tied to it anytime from your dashboard — it removes your account, the calendars you run on your own, and your name from every going-list. No need to ask us.

Children

GroupCal isn’t directed at children under 13, and we don’t knowingly collect their information.

Changes

We’ll update this page if our practices change.

Contact

Questions about privacy? Email hello@groupcal.net.