← Back to Potluck Planner

Privacy Policy

Plan a potluck, not a marketing funnel.

1. Our Privacy Philosophy

We believe in helping you organize a meal with friends, not in building a profile on you. Potluck Planner collects only the information needed to host your event and let guests sign up — nothing more. No advertising, no analytics trackers, no third-party cookies.

2. Data We Collect

To run the service, we store:

• Your email address, obtained from Google when you sign in, so we can show you the events you own and prevent other people from editing them. Your email is visible to anyone who opens an event you created (so guests know who's hosting).
• Event details you provide: title, date/time, location, description, theme color, and any image you upload.
• Guest sign-ups: the name and dish that anyone (signed in or not) types into a slot on your event.

All of this is stored in Google Cloud Storage in our project, readable only by this application. We do not sell, share, or license this data to anyone.

3. Data We Do Not Collect

• We do not log your IP address beyond what Google Cloud Run captures for basic request routing.
• We do not use Google Analytics, Adsterra, or any other analytics or advertising service.
• We do not track your activity across other websites.
• We do not collect device identifiers, location data, or contacts.

4. Cookies and Local Storage

We set two first-party cookies when you sign in:

• A session cookie (cryptographically signed) that remembers you're signed in for 30 days. It holds your email and an expiration time — nothing else.
• A short-lived OAuth state cookie used during the sign-in flow to prevent cross-site request forgery. It expires within minutes.

Guests who never sign in get no cookies from us at all. We do not use local storage to track you.

5. Third-Party Services

We rely on two Google services to operate the site:

• Google Sign-In handles the authentication flow. Google's own privacy policy governs that interaction.
• Google Cloud hosts our application (Cloud Run) and stores event data (Cloud Storage).

Event location links open Google Maps in a new tab when clicked. Doing so will send the address you typed to Google. We do not embed the map directly — nothing is sent to Google Maps until you click the link.

6. Your Data, Your Control

You can delete any event you created at any time from its event page; this removes the event JSON and any uploaded image from our storage. To delete your account entirely (all events you own), delete each event and then email us at the address below and we'll purge any remaining residual data. You can also revoke this application's access to your Google account at myaccount.google.com/permissions.

For users in the EU, UK, or California: you have the right to access, correct, delete, and port the personal data we hold about you. Contact us via the email below to exercise any of these rights.

7. Changes & Contact

If we ever change this policy in a material way, we will update this page. For any privacy question, reach out to contact@linearmotionjunctionbox.com.