Privacy
What the site keeps, and for how long
- Your circle: its name, the help you list (name, kind, days, time, length), helper first names, and who claimed which slot. Nothing else. Please put no health details in any field.
- Links: circles open by private random links. The site stores only a salted hash of the organiser link and the helper link, not the links themselves. The link sits in a cookie in your browser and after the # in the link, which browsers never send to a server, so it does not appear in server logs.
- Cookies: one cookie holds your circle link; one remembers which helper you are. A third protects forms (CSRF). No tracking or advertising cookies, no analytics.
- Addresses: to limit abuse, the site counts some actions per internet address per day, stored as a hash made with a secret key; counts older than 2 days are deleted. The web server keeps standard access logs.
- Deleting: the organiser can delete the circle at any time (Set up, then Delete); everything in it goes at once. Nightly database backups are kept for 14 days, then deleted, so a deleted circle can stay in a backup copy for up to 14 days. A circle nobody opens for 400 days is deleted automatically, and claims older than 400 days are removed.
- Email and texts: the site sends none and asks for no email address or phone number.
- Payments (when they open): handled by PayPal; the site would keep only PayPal's subscription reference, plan and end date.