Privacy
Last updated 5 October 2026
Salu-Salo helps a group agree on a date. It needs a little information to do that and nothing beyond it. This page says exactly what is stored, who it reaches, and when it is erased.
There are no accounts, no passwords, no cookies, no analytics, no
advertising and no third-party scripts of any kind. Nothing here is sold,
rented or used to build a profile of you.
What is stored
If you create an event
- The name you give as organizer, and the event's title, description, location, candidate dates and time zone.
- An email address, only if you choose to add one. It is used only to email you about your event: a welcome message with your organizer link when you create it, a recovery link if you lose your organizer link and ask for one, a note each time a guest joins or asks to join, a note when a guest asks to join the shared bill or says they have paid their share, and your own copy when you send calendar invites. Leaving it blank means organizer access cannot be recovered, which is the trade-off.
- Your event's settings — whether it is public, whether guests see each other's names, capacity, and so on.
If you respond to an invitation
- The name you enter, and which dates you marked as available.
- An email address, only if one is given — by you, or by whoever added you to the guest list. The organizer and co-hosts can see it, so they can reach you about the event. Salu-Salo also uses it to email you about that event: your personal code when it is asked for, word that your request to join was approved, the organizer's answer if you ask to join the shared bill, the date once it is confirmed, and a calendar invite if the organizer sends one.
- Anything else you choose to type: a comment, the name of a guest you are bringing, or answers to questions the organizer asked. Organizers often ask about food, so these answers can contain dietary or accessibility details. They are shown to the organizer and co-hosts, never to other guests.
- If the organizer is splitting costs, the amounts recorded against your name.
Kept briefly, by the service itself
- Your IP address, while a rate limit is counting. Requests to sensitive endpoints — recovery, event creation, code lookup — are counted per address so they cannot be brute-forced. Each counter is deleted as soon as its window expires, within an hour at most, and it is never joined to anything else.
- Ordinary web-server request logs kept by the hosting provider.
Never sent anywhere
- Guest lists you save for reuse stay in your own browser's storage. They are not uploaded.
- The passphrase in a private event's invite link. It sits after the
#, the one part of a web address a browser never transmits. The server never receives it, so it is not in any log.
Who else sees it
Three companies handle data on Salu-Salo's behalf, each for one job, and none of them for their own purposes:
| Who | What for | What reaches them |
|---|---|---|
| Vercel | Runs the website and the API | Requests, and standard server logs |
| Neon | Hosts the database | Everything stored, as described above |
| Resend | Sends email | The address and the message of each email described above, including the calendar file attached to an invite |
Nobody else. Your details are not shared with advertisers, data brokers or anyone else, and Salu-Salo has no advertising.
Who can see your event
Access is carried by the link, not by an account. Anyone holding an invite link can see the event it points at, so treat those links as you would the invitation itself. A private event additionally needs its passphrase.
- The organizer link is the credential for running the event. Anyone with it can edit and delete the event and see every guest's details.
- Guests see the roster only if the organizer left guest names visible. Email addresses and question answers are never shown to other guests — only to the organizer and co-hosts.
- On a phone, your organizer key is held in the device's own secure storage (Keychain on iOS, the encrypted store on Android). In a browser it is held for the session only and is cleared after thirty minutes of inactivity, so a shared or public computer does not keep organizer powers after you walk away.
How long it is kept
| Situation | What happens |
|---|---|
| The event's date passes | The event's date is the one the organizer confirmed. If they never confirm one, it is the date of the option with the most votes: the later date on a tie, and the last option offered if nobody has voted. At midnight two days after that date, in the event's own time zone, the event is over and everything it held is erased: every guest record, comment and co-host, the banner and any uploaded emoji, the organizer's name and email address, the event's keys, and the event's own title, description, address, dates and questions. The first person to open it after that moment triggers the erasure; a daily job erases the rest. All that is left is the address the event had, the date it was created, and a note that it was removed, which is what its old links are answered with: "Event has been removed after 48 hours." rather than an error or some future event that reused the address. |
| You delete the event | It disappears immediately and can be restored for seven days, in case the deletion was a mistake. After that the same erasure runs and it becomes permanent. An event you deleted says nothing to anyone holding an old link, which is unchanged: only an event that ended on its own announces itself. |
Removing your details
- Organizers: deleting the event removes everything it holds, on the schedule above.
- Guests: ask the organizer — they can remove you from the guest list, which deletes your record. If you would rather not go through them, write to the address below and say which event and which name.
- To stop receiving mail about an event, ask the organizer to remove you; there is no marketing mail to unsubscribe from, only messages about events you were invited to.
Children
Salu-Salo is not intended for children under 13, and is not directed at them. If a child's details have been entered by someone else, write to the address below and they will be removed.
Changes
If what is collected or who it is shared with changes, this page changes with it and the date at the top moves. Anything materially different will be noted here rather than made quietly.
Contact
Questions about anything on this page, or a request to remove something: salusalo.privacy@gmail.com.
← Back to Salu-Salo