Privacy policy

A sign-up sheet has to store the words people type into it. This page lists exactly what, for how long, and how to delete it.

What a sheet stores

• From the host: the event title, date, time, location, host name and note, the list of items and quantities, and a locked or open flag. All of it is text the host typed. It is visible to anyone who has the guest link.
• From each guest who signs up: the name they typed (up to 40 characters), the dish they typed (up to 60) and the dietary note they chose. These are visible to anyone who has the guest link.
• Keys: the host key and each guest’s undo token are stored only as SHA-256 hashes. We cannot read them back, and we cannot send you a lost host link.

What we do not collect from guests

• No email address, phone number, account or login is asked of guests or of hosts creating a sheet.
• The IP address is turned into a salted one-way hash, used only to count requests per day so that one network cannot flood the service. It is not stored with the sheet, and counters are deleted after a few days.

How long it is kept

A sheet and all of its sign-ups are deleted 30 days after the event date. The deletion happens when the sheet is next opened after that and in a daily cleanup. A host can delete a sheet at any time from the host view, which removes the sheet, its items and every sign-up from the database at once.

How a host deletes a sheet

1. Open the host link (the one that ends in ?k= and a key).
2. Open “Delete this sheet” and press the button twice.

If you lost the host link, email support@potlucksignup.site with the guest link and we will remove the sheet.

On your device

• A random visitor id, used to count visits without knowing who you are. Google Analytics adds its own cookies.
• “My sheets”: the sheets you created, with their host links, so you can come back to them.
• For guests: the undo token for each claim you made and the last name you typed, so the next form is pre-filled.

Clearing your browser’s site data removes all of it. It never leaves your device except the host link and the undo token you send when you use them.

Usage events

Besides Google Analytics, we keep our own first-party event log in our database. We record anonymous events such as page views, creating a sheet, claiming an item, opening the pricing page or the checkout: the visitor id, the page path, the referring site, campaign tags in the link, the country, a rough device type. The text of a sheet is never part of an event.

Email you send us

The contact form and the checkout ask for an email address. It is used to reply to you, or to send the one message about checkout you asked for. Ask us to delete it and we will.

Third parties

• Cloudflare hosts the site and its database, and may measure page views in aggregate.
• Google Analytics (GA4) gives us anonymous usage statistics: pages viewed, whether the pricing page or checkout was opened, which tool buttons were used, with a rough location and device type. It sets its own cookies (such as _ga) to tell visits apart. We never send it names, emails, file names or anything typed into a sheet or form. You can block it with any content blocker and the site works the same.

Spam protection

Forms carry a hidden field that people never see and a minimum fill time. Automated submissions that fill the hidden field or arrive too fast are dropped. To limit abuse we also count requests per network address per hour and per day. The address is only ever stored as a salted one-way hash in those counters, never as the address itself. No third-party spam check and no CAPTCHA is used.

No advertising code, no ad cookies, no selling of data. The only third-party script is Google Analytics.