Privacy policy

1. Controller

The controller responsible for data processing on plannin.de is:

For any privacy question, write to the e-mail address above.

2. Hosting (Vercel)

Plannin is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. On every request Vercel processes the data your browser transmits technically: IP address, date and time, the address requested, browser and operating system, referring page, amount of data transferred and the country derived from the IP address.

Vercel needs this data to deliver the site, fend off attacks and find errors; server logs are kept only briefly. Our server functions run in Vercel's Frankfurt data centre (region fra1); static files are delivered by Vercel's global network from the location closest to you.

The legal basis is our legitimate interest in a secure and fast operation (Art. 6(1)(f) GDPR). Vercel is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); in addition, Vercel's data processing agreement with the EU standard contractual clauses applies. Vercel's privacy policy: vercel.com/legal/privacy-policy.

3. Database (Neon)

All content — accounts, teams, planning data, sign-ups — is stored in a PostgreSQL database at Neon Inc. (USA) in a data centre in Frankfurt, Germany (AWS region eu-central-1). Neon processes the data solely on our behalf (Art. 28 GDPR); access from the USA, for example for support, is covered by the EU standard contractual clauses. Neon's privacy policy: neon.com/privacy-policy.

4. Account and sign-in

For an account we store: name, e-mail address, password (only as a bcrypt hash — we never know the password itself), chosen language, and the time of registration and e-mail confirmation.

When you sign in we create a session (cookie pn_session, 30 days). Confirmation codes and password-reset links are stored hashed and for a limited time only (code 15 minutes, reset link 60 minutes). To slow down abuse we count sign-in, registration and reset attempts per e-mail address and per pseudonymised IP address (truncated hash); these counters are deleted after 24 hours.

Purpose: providing your account and protecting it from abuse. Legal basis: Art. 6(1)(b) GDPR (contract of use) and Art. 6(1)(f) GDPR (security).

You can delete your account yourself at any time under My account; sessions and memberships are deleted with it. Teams you own must be deleted or transferred to another member first. Registrations that are never confirmed remain stored without any function until they are replaced by a new registration with the same address or cleaned up by us.

5. Teams and planning data

Within a team we store what its members enter: team name, description and time zone, the team's people (names of facilitators), target groups, availability, events with description, location or join link, the schedule with status and notes, and backups you restore yourselves. Also: who is a member, in which role and since when, plus join requests.

All approved members of the team can see this content. The team is responsible for it: whoever enters names or other data of further people must be entitled to do so. We use the content only to provide the service.

Legal basis: Art. 6(1)(b) GDPR towards the members; for third parties entered by the team, the team's legitimate interest in planning together (Art. 6(1)(f) GDPR). Retention: until the owner deletes the team.

6. Public team page, sign-ups and calendar feed

If a team enables its public page, the following is visible at plannin.de/t/… without signing in: team name and description, the events with date, time, target group, description and location (or “online”), the names of the facilitators, the number of sign-ups per date and the initials of the people who signed up. The same dates (without sign-ups) are in the calendar feed (.ics) that visitors can subscribe to in Google, Apple or Outlook calendars — the calendar service then fetches the feed regularly.

When you sign up for an event on a public page we store: your name, your group, optionally e-mail address and note, the dates you chose, the time, and a pseudonymised hash of your IP address that we use to limit mass sign-ups. Your browser also receives an edit key (localStorage, see below) so you can change your sign-up later. For online events the join link is shown to you after signing up.

The members of the team hosting the event can see your sign-up; publicly only the count and initials appear. The team may use your details only to organise its events.

Legal basis: Art. 6(1)(b) GDPR (your sign-up) and Art. 6(1)(f) GDPR (spam protection). Retention: until the team deletes the sign-up or the event, or until the team is deleted. You can have your sign-up deleted at any time via the team or via us.

7. E-mails (Resend)

Plannin sends system e-mails only: the confirmation code at registration, the “you already have an account” notice, password-reset links, join requests to a team's owner (with the requester's name and e-mail address) and the approval message to the new member. There is no newsletter and no advertising.

E-mails are sent through Resend (Resend Inc., USA) as our processor. Resend receives the recipient address, subject and content and keeps delivery logs and content for a short time. The transfer to the USA is covered by the EU standard contractual clauses (Art. 46(2)(c) GDPR). Resend's privacy policy: resend.com/legal/privacy-policy.

Legal basis: Art. 6(1)(b) GDPR.

8. Zoom (online events only)

If a team sets an event to “virtual”, Plannin can create a Zoom meeting automatically through our Zoom account. For that we send only the event name, the team name and the time zone to Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA — no participant data. Whoever joins the meeting uses Zoom directly, under Zoom's privacy statement. Zoom is certified under the EU-US Data Privacy Framework.

Legal basis: the team's legitimate interest in running events online with little effort (Art. 6(1)(f) GDPR). A team can also enter a join link itself and not use Zoom at all.

9. Visitor statistics (Vercel Web Analytics)

To see how many people visit Plannin and which pages they use, we use Vercel Web Analytics. It sets no cookies and tracks nobody across other websites. It records page views, referring page, country and region (derived from the IP address — the IP address itself is not stored), device type, browser and operating system. Visits are grouped only within one day through a hash of IP address and browser identifier that cannot be reversed; we see aggregated numbers only.

Legal basis: Art. 6(1)(f) GDPR (audience measurement). As no cookies are set and nothing is read from your device, no consent under § 25 TDDDG (German telecommunications privacy act) is required. Details: vercel.com/docs/analytics/privacy-policy.

10. Cookies and local storage

Plannin uses strictly necessary cookies only (§ 25(2) no. 2 TDDDG). There are no advertising or tracking cookies and no third-party cookies — hence no cookie banner.

In your browser's localStorage (stays on your device and is used only where stated):

11. Fonts, video and external content

All fonts and the landing-page video are served from our own server. Opening Plannin makes your browser connect neither to Google Fonts nor to any other third party. Links to Zoom meetings or external calendars lead to those providers, whose privacy policies apply there.

12. Recipients and transfers outside the EU

• Vercel Inc. (USA) — hosting, delivery, visitor statistics
• Neon Inc. (USA) — database, located in Frankfurt, Germany
• Resend Inc. (USA) — sending the system e-mails
• Zoom Video Communications, Inc. (USA) — only if a team uses the Zoom integration

All four are processors under Art. 28 GDPR. Where data reaches the USA, this relies on the adequacy decision for the EU-US Data Privacy Framework (Vercel, Zoom) or on the EU standard contractual clauses (Neon, Resend). Beyond that we disclose data only where the law obliges us to.

13. Security

• Encrypted transport (HTTPS with HSTS)
• Passwords stored as bcrypt hashes only; codes and reset links hashed and short-lived
• Mandatory e-mail confirmation, rate limits against password guessing and mass sign-ups
• Content Security Policy and further protective headers
• Team data accessible to approved members only; public pages show only what the team releases

The database provider keeps short-term restore points that expire automatically after a few days.

14. Your rights

Towards us you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). Simply write to hallo@plannin.de. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority of your federal state or place of residence.

Much of it you can do directly: change your name and password and delete your account under My account; an owner deletes a team in its settings; in the planner, under Availability → Settings, your team can download a backup of its data as a file.

15. Minimum age

Plannin is intended for people aged 16 and over. Younger people should not create an account or sign up on public pages.

16. Changes

We update this policy when Plannin changes — the current version is always on this page. The date of the last change is shown at the top.