Privacy policy

Plannio is operated by Laweb (CVR 29076561). We are the data controller for the personal data described in this policy. For any privacy question or request, contact us at privacy@plannio.eu.

We only collect what the service needs to work:

• Account data — your email address, display name, and profile picture URL. Provided by you at sign-up or by Discord/Slack when you sign in with them. Used to identify you in Plannio and in polls you take part in. Legal basis: performance of a contract (GDPR art. 6(1)(b)).
• Password — if you sign up with email and password, we store a salted cryptographic hash of your password, never the password itself. Legal basis: performance of a contract.
• Sign-in identities — the Discord or Slack user ID linked to your account, so you can sign in with those services. Legal basis: performance of a contract.
• Votes — the dates you pick and the name shown with your response. If a poll allows voting without an account, only the name you type is stored. Legal basis: performance of a contract, or our legitimate interest in running the poll for its participants (art. 6(1)(f)).
• Session cookie — a single strictly necessary cookie (plannio.sid) that keeps you signed in for up to 30 days. It is not used for tracking and does not require consent. We do not use advertising or cross-site tracking cookies.

We use two kinds of cookies:

• Strictly necessary — theplannio.sid session cookie described above. It is required for the service to work and is set without consent.
• Analytics (Google Analytics 4) — only if you accept them in the cookie banner. These cookies (for example _ga) help us understand how many people visit and which pages are used, so we can improve the site. They are set only after you click “Accept”. Legal basis: your consent (GDPR art. 6(1)(a)).

Google Analytics is provided by Google Ireland Limited, with Google LLC (USA) acting as a sub-processor. This means analytics data may be transferred to the United States, safeguarded by the EU–US Data Privacy Framework and Google’s standard contractual clauses. We have IP anonymisation enabled and do not use the data for advertising.

You can withdraw or change your choice at any time via the “Cookie settings” link in the footer. Declining analytics cookies has no effect on how the service works.

Poll results, including the names of people who responded, are visible to everyone who has the poll link — that is the point of a shared poll. Poll creators can choose to hide participant names from other participants when creating a poll.

If the poll creator has connected a Discord or Slack channel, your name and your response are also posted to that channel when you vote. This is stated on the voting page. Data posted to Discord or Slack is thereafter governed by their own privacy policies, with Discord and Slack acting as independent controllers.

• Heroku (Salesforce) — hosts the application and the database in the EU region, acting as our data processor.
• Discord / Slack — only if you sign in with them (they send us your profile) or a poll creator connects a channel (we send poll updates including participant names to that channel).
• Google (Analytics) — only if you accept analytics cookies. Aggregated usage data is processed by Google as described in the “Cookies and analytics” section above.

We never sell personal data or share it for advertising.

• Polls and votes — deleted automatically 12 months after the last activity on the poll, or earlier if the creator deletes the poll.
• Account data — kept until you delete your account. Deleting your account immediately removes your profile, sign-in identities, your polls, and all your votes.
• Sessions — expire after 30 days and are then removed from the database.

Under the GDPR you can at any time:

• Access and export your data — use “Download my data” on your account page to get a JSON copy of everything we store about you (art. 15 and 20).
• Delete your account and all associated data from the same page (art. 17). Poll creators can delete individual polls, which removes all votes in them.
• Rectify incorrect data — your name and picture are refreshed from Discord/Slack on each sign-in; for anything else, contact us (art. 16).
• Object to processing based on legitimate interest (art. 21).

If you voted on a poll without an account and want your response removed, email privacy@plannio.eu with the poll link and the name you used, or ask the poll creator to delete the poll.

You also have the right to lodge a complaint with your supervisory authority. In Denmark that is Datatilsynet (datatilsynet.dk).

All traffic is encrypted with HTTPS. Passwords are stored as salted scrypt hashes. Sessions use secure, http-only cookies. Access to production data is restricted, and sign-in endpoints are rate limited to prevent abuse.

If we make material changes to this policy, we will update the date at the top and, where appropriate, notify signed-in users. See also our terms of service.