Privacy, in plain words

Let’s Hang plans one Event at a time, and it collects almost nothing. There are no accounts, no email addresses, no analytics, no ads, no tracking, and no third parties — nothing is shared with, sold to, or sent to anyone. Capability lives in unguessable links, not in profiles.

What’s stored

For each Event: its title and description, the candidate Slots and Location Options, and — for everyone who answered — the display name they typed, their marks, and their vote. That is the whole database. There is no password, no email, no IP address kept on disk, and no analytics log. The abuse protection is a few in-memory counters that forget on their own; they are never written to storage.

Cookies

Four kinds, all first-party, all strictly necessary, each kept one year. That is why there is no consent banner: there is nothing to consent to — no analytics, no marketing, no third-party cookies.

tz

Remembers your timezone, so times show in yours. The page’s own script writes it — that is why it is deliberately readable by the page (not HttpOnly). Secure, SameSite=Lax. You can also set it with the timezone picker on any Event page.

tz_pin

A one-flag marker set only when you pick a zone in the timezone picker: it tells the page’s script your choice was explicit, so it stops guessing your zone from the browser. Secure, SameSite=Lax.

o_{event_id} (the Organizer cookie)

Holds the Edit token, so this browser keeps management rights for that one Event without the link. HttpOnly, Secure, SameSite=Lax. Whoever holds the Edit Link holds the same power — the cookie is only a convenience.

r_{event_id} (the respondent cookie)

Holds your Response token, so revisiting the Event opens your answers for editing. HttpOnly, Secure, SameSite=Lax. The Response Link is the real key — it works on any device; the cookie just saves you pasting it.

Deletion

What we keep, and for how long: an Event's schedule and responses are stored only until the Event is deleted. You can delete it yourself from the Edit Link at any time — everything is removed immediately, with no undo. Otherwise it is deleted automatically 30 days after responses close. Those 30 days are deliberate: the "It's on!" card and the results stay viewable while the plan is still useful — that receipt is why the window isn't shorter — and after them everything is gone for good.

The short version

Your Event’s data is on the site only so the Event can work. It is deletable by the Organizer at any moment, is deleted automatically 30 days after responses close, and was never shared with anyone in between.