Privacy

What we keep

• Gatherings. What the host fills in: the title, description, date and time, place, details such as seats, cost and dress code, the look, and the host's name and avatar if they add them.
• Replies. Each guest's name, avatar, reply, plus-ones and note.
• Passwords. Host and share passwords, stored only as slow, salted hashes. Nobody can read them back, us included.
• This device. One cookie, __Host-lds_device, holds a random code. We keep only a scrambled (hashed) copy of it, next to the gatherings this device started, unlocked or replied to. That's how the site remembers you without an account. It does nothing else, so there's no cookie banner.
• Password tries. To slow down guessing, we count wrong share-password tries per network address (your IP address, or the first half of it on IPv6). The count is deleted with the gathering.

Why we keep it

To show each gathering to the people it's shared with, to let hosts run it, and to keep it safe from spam and password guessing. We don't use it for anything else: no advertising, no analytics, and we never sell or share it.

How long we keep it

• Drafts that are never published are deleted 48 hours after their last change, and always within 7 days of being started.
• Gatherings, with every reply, are deleted 14 days after they end, or 14 days after they start when there's no end time. Cancelled gatherings follow the same rule.
• The device cookie lasts up to 400 days. "Forget this device" on the home page clears it and unlinks this device from its gatherings straight away.

Who else is involved

• Cloudflare hosts the site and stores its data in Europe, so your information is processed outside South Africa. Cloudflare keeps short-lived technical logs to keep the service running and secure.
• Maps. A map's tiles come from OpenFreeMap, built on OpenStreetMap data, and load only when someone opens the map. When a host searches for a place, our server asks Photon by komoot, passing the search and a rough location from your network so nearby places come first, but nothing about who you are.
• Buttons you choose to tap. "Get directions" opens Google Maps or Apple Maps, the calendar buttons open Google Calendar or Outlook with the gathering's details, and sharing to WhatsApp opens WhatsApp. Each handles what you send it under its own privacy policy.
• Links from a gathering to other sites never carry that gathering's address.

Your rights

Under South Africa's Protection of Personal Information Act (POPIA), you can ask what we hold about you, and ask us to correct or delete it. Hosts can edit or delete their gatherings at any time, and guests can change their reply. For anything else, email hello@letsdosomething.app with the gathering's link. If you're not happy with our answer, you can complain to the Information Regulator.

Who we are

letsdosomething.app is responsible for your information. You can reach us any time at hello@letsdosomething.app.