Privacy Policy
This policy explains what Stundeo collects, why, and what control you have over it. It covers both organizers who hold an account and visitors who open a public event page.
1. What we collect from organizers
Your email address and authentication identifier, supplied when you sign in. Any display name, default time zone and preferences you set. The events and calendars you create, including titles, descriptions, locations, images and attachments.
2. What we collect from visitors
An anonymous count of clicks on the calendar buttons of an event, used to show organizers how a link performed. When RSVP is enabled, the name, email address and answer the visitor submits. A short-lived cookie so a returning visitor sees their own previous answer. Public event pages carry no advertising or third-party analytics scripts.
3. Why we process it
To operate the service you asked for: rendering event pages, generating calendar files and feeds, recording RSVPs on the organizer's behalf, keeping accounts secure, and preventing abuse. We do not sell personal data and do not use it for advertising.
4. Processors we rely on
Google Cloud hosts the application and the database in the European Union. Firebase Authentication handles sign-in. Open-Meteo provides weather forecasts and Nager.Date provides public holiday data; both receive only a place and a date, never anything about a visitor. Support emails are delivered through Resend.
5. How long we keep it
Account and event data are kept until you delete them or close your account. Attendee records are kept for as long as the event exists. Click counts are aggregate and retained with the event. Deleting an event or an account removes the associated records.
6. Your rights
You can access and correct your data from the dashboard, export events as ICS files, and delete your account and everything in it from the account page. If you are in the European Economic Area or the United Kingdom you also have the right to object to processing, to request a portable copy, and to complain to your local supervisory authority.
7. Attendees and organizers
When someone RSVPs, the organizer of that event is the controller of the response and Stundeo processes it on their behalf. Requests to remove an RSVP should go to the organizer first; we will help if that is not possible.
8. Security
Traffic is encrypted in transit. Access to production data is restricted to the people who operate the service. No system is perfectly secure, and we will notify affected users of a breach where the law requires it.
9. Children
Stundeo is not directed at children under 13, and we do not knowingly collect their personal data. Contact us if you believe a child has provided data and we will remove it.
10. Changes and contact
Material changes to this policy will be posted here with a new date. Privacy questions can be sent through the contact page.