Grouphours

Privacy

Grouphours keeps as little as it can. Here's all of it, in plain words.

What we keep

  • If you respond to an event: the name you type and the times you mark (for a weekly group, your usual week and any one-off changes). No account, no email.
  • If you create an event or group: its name, details, days and times.
  • If you sign up as a host: your email address, used only to send you sign-in links.

If you use the Discord bot

The bot is optional. If you never add it or tap its buttons, none of this applies to you.

  • When you sign up for an event: your Discord user ID (a number, not your name) and the role you picked. Cards show you with a Discord mention, so Discord fills in your name, not us.
  • When you make an event: what you put in it (title, time, details, picture and link addresses, roles), your user ID as its creator, and the IDs of the server, channel, roles and message it uses.
  • Your timezone, if you pick it or let the site detect it, so times you type mean what you meant. The first one picked in a server is also kept as that server's default.
  • Templates a server saves, and the channel a /plan post went to.

The bot doesn't read chat messages. It only sees the commands and buttons you use with it. To check whether you can manage a server's events, it asks Discord for your roles each time and doesn't keep them.

What we don't do

  • No ads, and no tracking or advertising cookies.
  • No analytics that follow you around. We count page visits without cookies, and private links (events, groups, admin pages) are counted only as "an event page", never by their address.
  • We count how often things happen (events made, answers, sign-ups) as plain totals, with nothing attached that could point to you or your event.
  • We never sell your information or use it for anything but running the site and bot.
  • The Ko-fi and PayPal buttons take you to those sites. We never see your payment details.

Who else handles it

A few services run parts of Grouphours for us. They only use the information to do that job:

  • Vercel runs the website and counts page visits.
  • Supabase stores the data (encrypted on disk) and handles host sign-in.
  • Resend sends the sign-in emails.
  • Cloudflare runs our domain and passes on emails sent to us.
  • Discord receives the events you post with the bot, since it shows them in your server.

Cookies

Only the ones the site needs to work: one per event, so this browser can edit your own response, and a sign-in cookie for hosts with an account. If you open the Discord dashboard from /dashboard, a cookie remembers your Discord user ID for 30 days.

Stopping spam

To limit how often someone can create events or send sign-in emails, we count requests using a scrambled version of your internet address. It can't be turned back into the address, and it's deleted within a day.

How long we keep things

Events and everyone's responses are deleted automatically 30 days after the event's last date. Weekly groups are deleted after 90 days without any activity, and one-off changes to a member's week are deleted two weeks after their date. Hosts can delete an event or group, with everything in it, at any time.

Discord events and their sign-ups are deleted 30 days after the event starts, and unposted drafts after two days. /plan records go after 60 days. Saved templates stay until the server deletes them, and your timezone stays until you ask us to remove it.

Who can see what

Anyone with an event's link can see the names and times of the people who responded. The admin link and host tools are private to the host.

Removing your information

  • Your own times: open the link in the same browser you used, clear your times and save. For a weekly group, clear your usual week the same way.
  • Ask the host: they can delete the whole event or group, or remove you from a weekly group.
  • On Discord: tap your button on the card again to take your name off. The person who made the event, or a server manager, can delete it.
  • Or wait: everything is deleted automatically, as described above.

Questions

Email hello@grouphours.com, including if you'd like your account deleted, or everything we hold for your Discord user ID. We'll do it within 30 days.