Privacy Policy

The short version

• No accounts, and we never ask for email addresses or phone numbers.
• We store only what you type into an event (titles, names, notes, wishlists, messages).
• Passwords are stored as one-way hashes, never in plain text.
• No tracking cookies. Our visitor stats are anonymous counts from our own cookieless analytics server.
• Organizers can delete an event — and every sign-up on it — at any time.

Information you choose to give us

• Event details — title, description, dates, times, location, and the slots or items you set up.
• Names — whatever name you type when you sign up, RSVP, join a gift exchange or enter a raffle. You can use a nickname, and many events allow anonymous sign-ups.
• Notes, messages and wishlists — anything you add to your entry.
• Passwords — organizer and event passwords are stored only as salted one-way hashes, so we can check a password but can't read it.

Everything above is visible to people who have the event link (and, for password-protected events, the password), unless the organizer turns on "hide names", in which case only the organizer sees who signed up.

The people who run SignupGadget can also access stored event data. We only look at it to keep the service running, to help when you ask us to, or to deal with spam and abuse — and our admin tools log every access.

Information we never collect

• Email addresses or phone numbers
• Accounts, profiles or social logins
• Payment information (SignupGadget doesn't process payments)
• Contact lists or location data from your device

What's saved on your device

Instead of accounts, your browser keeps a few small items in its local storage (not cookies). They never leave your device except when you act on that specific event:

• Organizer keys — prove you're the organizer of events you created or opened with an organizer link.
• Event-password tokens — so you don't have to re-enter an event password.
• Edit tokens — let you change or remove your own sign-ups, RSVPs and entries.
• Your events list and the last name you used — convenience only, shown just to you.

You can clear these any time by clearing your browser's site data. If you do, use your private links (or the organizer password) to get back in.

Visitor statistics (no cookies)

We use NeverCookie, our own self-hosted installation of the open-source, cookieless analytics software Plausible Community Edition. It runs on a server we control; the data is not shared with or sold to anyone.

For each page view it records the page address, the referring website, your browser, operating system, device type and country. Your IP address is used only to work out the country and to calculate a visitor count with a key that changes every day — the IP address itself is not stored, and visits can't be linked across days or across websites.

Before anything is sent, event links are anonymized (every event page is counted as the same page), and private links, organizer keys and full outbound link addresses are stripped. We also count simple actions — like "event created" or "signed up" — without any names or event details.

Security and anti-spam

To stop spam and password guessing, we briefly keep a scrambled (hashed) form of your IP address combined with a key that changes daily, along with a count of recent requests. These records expire within hours and can't be turned back into your IP address.

If someone tries to sign in to our admin area, we log the attempt with a shortened IP address (for example 203.0.113.x).

Like almost every website, our hosting provider keeps standard server logs (such as IP address, browser and the pages requested) for security and troubleshooting. We don't use them to profile visitors.

Third-party services

• No third-party fonts, QR services or trackers. Fonts are served from our own server and QR codes are drawn by your browser.
• Maps and calendars — if you tap a location or "Add to Google/Outlook calendar", you go to that company's site, and their privacy policy applies there.

How long we keep data

Events stay available until the organizer deletes them. We may remove old, inactive events from time to time.

Deleting an event permanently removes the event and everything on it. Removing your own entry deletes it right away.

Children's privacy

SignupGadget is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has entered personal information, contact us and we'll remove it.

Your choices

• Sign up with a nickname, or anonymously where the organizer allows it.
• Edit or remove your own entries with your private link.
• Ask the organizer to remove an entry, or contact us if you can't reach them.
• Organizers can delete their event and all of its data at any time.

Changes and contact

If we change how we handle data, we'll update this page and the date at the top. Questions or requests? Email support@signupgadget.com or visit our contact page.