Privacy
The short version is on the trust page. This is the same thing said precisely, for anyone who needs the precise version.
Who is responsible
SignUpCity is run by one person, Garrett Holmes. For anything on this page, write to privacy@signupcity.app.
If you organize something
To create a sheet, poll, or event you do not need an account. If you make one, we store your email address, your name if you give it, your time zone, and whether you asked for the occasional newsletter. If you sign in with Google we store the identifier Google gives us, not your Google password.
Without an account we store no identifier for you at all. What you get instead is a private link that manages the thing you made. We cannot recover that link for you, because we have no way to know it was yours — which is the trade-off for not asking who you are.
If someone invited you
You are not asked to make an account and you are not tracked across the web. We store the name you type, the email address if the organizer asked for one and you gave it, your answers to their questions, and your time zone so times display correctly. That information belongs to the sheet you joined. It is not used for anything else, it is not sold, and you are never sent marketing.
Your browser keeps a cookie holding a private token, so you can come back from the same browser and change or cancel your entry without signing in.
Cookies
There is no cookie banner because there is nothing to consent to. We set:
- a session cookie, if you signed in;
- a cookie scoped to one sheet or poll, when you open it with a private link, so the link itself does not have to sit in your browser history;
- a cookie that records that this browser has already passed a "are you a person" check, so you are not asked repeatedly;
- a cookie that remembers light or dark, if you chose one at the bottom of a page. Choosing "System" removes it.
None of them track you between sites, and none are used for advertising.
Measurement
Marketing pages are counted with Cloudflare Web Analytics, which uses no cookies and no cross-site identifier. No measurement script of any kind runs on a page a participant sees. Two things are counted from the page itself: that the time-zone planner was used at all, and which of the sharing buttons an organizer pressed. Each is one word from a fixed list — never a title, an address, a link or anything else you typed — and neither sets a cookie. Rate limits, which stop one network flooding the service, use a salted hash of your network address. The raw address is never written down, and neither is your browser's user-agent.
Mail is sent through Resend, and organizer-facing mail sometimes through Brevo. They see the address and the message in order to deliver it. Every non-essential email has a working one-click unsubscribe. If a message bounces or is marked as spam we add the address to a suppression list and stop writing to it.
Who else handles your data
Nobody buys it, and these are the only companies that see any of it, each for one job:
- Cloudflare hosts the site and the database, runs the "are you a person" check (Turnstile) on forms where you make or sign up for something, counts visits to marketing pages, and runs the AI that drafts from a description when Anthropic's cannot.
- Resend and Brevo deliver email.
- Anthropic turns a description into a draft.
- Google, only if you choose to sign in with Google.
The database is in North America, and pages are served from Cloudflare's network around the world. If you are outside the United States, what you enter is transferred there.
The newsletter
If you join the newsletter on the page for assistants, your address is stored encrypted and nothing is sent except one message asking you to confirm. Until you do, you are not on the list. The link in that message also takes the address off again with one click, and a line to privacy@signupcity.app does the same. Every issue will say how to leave. Participants are never added to it.
Artificial intelligence
If you use the "describe it" box, the text goes to Anthropic to be turned into a draft, and to Cloudflare Workers AI if Anthropic cannot answer. It is not used to train either company's models. We keep the text for seven days to see where drafts go wrong, then delete it. If you would rather it never left your browser, use the blank form or a template — every draft the AI makes is editable and nothing is created without you pressing a button.
How long things are kept
- Sheets, polls, and events: until you delete them. Thirty days after that, removed for good.
- Email records: ninety days, so a delivery problem can be traced.
- Pasted AI text: seven days.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it, and we will do it within thirty days. Anyone who runs a sign-up sheet or a poll can download its list as a spreadsheet from its own page without asking anyone.
You can close your account yourself from Settings. That takes your name and email address off everything you made and removes the account for good thirty days later. The sheets, polls and event pages stay up for the people already using them, so delete any you want gone first.
Last changed 13 September 2026.