Privacy Policy

Last updated: 13 August 2026

What we collect

• Account data: your email address, an optional first name, and a hashed password (we never store or see the password itself).
• Challenge data: the challenges you create, the days you mark, and any notes you attach to days.
• Security data: a salted one-way hash of your IP address, kept up to 3 days, used only for rate limiting. Raw IP addresses are never stored.

What we do with it

We run the service you signed up for: showing your calendars, computing streaks, sending the emails you asked for (password resets, and daily nudges only if you opt in). Nothing else. We do not sell or share personal data with third parties.

Cookies

One cookie: your login session. No advertising or cross-site tracking cookies.

Sharing

Calendars are private by default. If you switch on sharing, anyone with your share link can view that calendar (title, description, marked days and stats - never your notes, email or name unless you put them in the title/description). You can rotate or disable the link at any time.

Your rights

• Export: download everything from your account page as JSON at any time.
• Delete: the account page has full self-service deletion. It is immediate and permanent.
• For anything else, email hello@challengecalendars.com.

Data location & retention

Data is stored on our servers and kept for as long as your account exists. Deleted accounts are removed immediately from the live database.