Last updated 15 September 2026
Privacy Policy
Find a Day helps a group pick a date. It collects only what that takes, never sells data, and shows no ads.
Who is responsible
Find a Day is run by Francesco Palandra, an individual, who is the data controller for the personal data described here. For any privacy question or request, write to palandrafrancesco@gmail.com.
What we collect
- Events you create: title, category, description, location, meeting link, price, the dates and hours on offer, time zone, and an optional cover image.
- Answers: the name you type (or your username, if signed in) and the dates or times you pick.
- Accounts (optional): your email address, a password (stored hashed, never readable), your username, and which events you created or answered. If you sign in with Google or Apple, we receive your email address from them.
- Usage data: pages visited, clicks, browser and device type, referring site, and approximate country derived from your IP address. This is collected without cookies — see below.
You can create and answer events without an account. Please don’t put sensitive information in event details or names.
Who can see it
- Anyone with an event’s invite link can see the event’s details.
- Names and picks are visible to the organizer, and to other participants when the organizer makes results visible.
- Whoever holds the manage link can edit the event, rename or remove answers, and confirm the date.
- Cover images are stored at a public web address that is hard to guess but not secret.
Treat these links like the event itself: share them only with the people you mean to invite.
Why, and on what legal basis
- To provide the service — storing events, answers and accounts, and sending sign-in emails (GDPR Art. 6(1)(b), performance of a contract).
- To understand and improve the product, and keep it secure — anonymous-by-design usage statistics and server logs (Art. 6(1)(f), legitimate interests).
Service providers
These companies process data on our behalf, under data processing agreements:
- Supabase — database, sign-in, and image storage, hosted in the EU.
- Vercel — website hosting and cookieless page-view analytics. Vercel operates globally, so data may be processed outside the EU under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
- PostHog — product analytics, on its EU cloud, configured not to use cookies or browser storage.
- Google and Apple — only if you choose to sign in with them. Their own privacy policies apply.
How long we keep it
- Events and their answers are deleted automatically 90 days after the last date on offer.
- Accounts are kept until you ask us to delete them. Deleting an account removes your email and username; your answers stay with their events, no longer linked to you, until those events are deleted.
- Usage data and server logs are kept for the periods set by Vercel and PostHog.
Cookies and browser storage
Find a Day uses no advertising or tracking cookies, so there is no cookie banner. The only items stored in your browser are needed for a feature you use:
| Name | Purpose | Lasts |
|---|---|---|
| sb-…-auth-token | Keeps you signed in. Set only if you log in. | Until you log out or the session expires |
| fad_t | Remembers your answer to one event so you can edit it. Only sent to that event’s pages. | 1 year |
| theme | Your Light / Dark choice. Set only if you pick one. | 1 year |
| find-a-day-locale, find-a-day-time-format | Language and 12/24-hour preferences (stored in your browser, not a cookie). | Until you clear site data |
Your rights
Under the GDPR you can ask to access, correct, delete, or export your personal data, and to restrict or object to how it is processed. Email palandrafrancesco@gmail.com — we reply within one month. If you created an event, you can also edit it or remove answers yourself from its manage link.
If you think your data has been handled unlawfully, you can complain to your local data protection authority — in Italy, the Garante per la protezione dei dati personali.
Children
Find a Day is not directed at children under 16, and we don’t knowingly collect their data.
Changes
If this policy changes, the new version will be posted here with a new date. Significant changes will be announced on the site.