Privacy
Short version: your calendar is encrypted in your browser before we store it, and only people with your link can read it. There are no accounts, no ads and no third-party fonts. If you allow it, we count visits with Google Analytics. If you do not, nothing is counted.
Your calendar
When you create a link, your browser encrypts the whole calendar (title, names, messages and door links) with a random key (AES-GCM). We store only the encrypted version, on Netlify's storage. The key is part of the link you send, after the # sign, and browsers never send that part to any server, so we cannot read your calendar.
Stored readable, so the link preview can show them: the house style and, only if you leave "Show your names in the link preview" switched on, the recipient's and your first names as you typed them. Also stored: the last-door date, the creation and update time, and a fingerprint (hash) of your private edit code, so only you can change the calendar.
Calendars are deleted automatically 60 days after their last door. To have one deleted earlier, contact us with the link.
To stop abuse, the number of calendars created per internet connection is limited. For this we keep a one-way hash of the IP address for 2 days. Older links that contain the whole calendar after the # sign still work and are not stored at all.
Analytics (only with your consent)
On your first visit we ask whether we may count your visit. Only if you choose "Allow" do we load Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without your consent it is not loaded at all.
What it receives: the page address without the # part, a fixed page name (Maker, Calendar or Privacy), the referring website, your approximate location (country and city, derived from your IP address, which Google Analytics 4 does not store), device and browser type, and simple events we send: that a calendar was created (with the chosen audience, house style, number of filled doors and whether links or custom dates were used), that a calendar or example was viewed, which door number was opened, and how a link was shared (copy, WhatsApp, email). It never receives your messages, names, titles or the links you put behind doors.
Cookies: Google Analytics sets the cookies _ga and _ga_1SN3E05VKH to recognise returning visitors. They expire after 13 months. Google signals and ad personalisation are switched off, and data is kept for 2 months.
Data may be processed by Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the "Cookie settings" link below; the cookies are then deleted.
Stored on your device
Your browser's local storage keeps your draft and its private edit code (on the device where you write it), which doors have been opened (on the device of the person who opens them), your cookie choice and whether you turned the door chime on. This never leaves the device. You can clear it at any time by clearing site data in your browser.
Hosting
The site is hosted by Netlify, Inc. Like any web host, Netlify processes technical request data (such as IP address and browser type) to deliver the pages and protect against abuse. This data does not include your messages.
Your rights
You can ask for access to, correction or deletion of personal data, object to processing, and complain to a data protection authority. Since we do not know who you are, we can usually only help with data you can identify, for example by giving us your Google Analytics client ID.
Contact
Rakesh Menon. Email:
Last updated: 23 October 2026 (short links and encrypted storage)