Privacy Policy.

This site has three forms. The application to join Kalendars, which was at /kalendars/apply, is covered by Kalendars’ own privacy policy at /kalendars/privacy, not by this page, like everything else about the Kalendars app. The Shoebox waiting list, at /shoebox, and the weekly update, in the footer and on /blog, are covered here. Apart from those, the only personal data we hold is what you send us yourself, plus the small amount of technical data it takes to keep the site running.

• The Shoebox waiting listYour e-mail address, your first name if you give it, and when you joined. Your IP address is counted for a short time to stop the form being flooded, and is not stored with your entry.
• The weekly updateYour e-mail address, where on the site you subscribed, when you subscribed and confirmed, and, if you leave, when you left. We send one e-mail with a link to confirm, and the update only after you confirm. Your IP address is counted for a short time to stop the form being flooded, and is not stored with your subscription.
• E-mail correspondenceThe content of e-mails you send us, your address, and our replies.
• Technical and server logsIP address, browser type, and request data, kept briefly for security and to keep the site running.
• Error reportsIf the site breaks in your browser, a report of the error is sent to our monitoring tool: the page, the browser and its version, and the technical details of the failure. No session recording, no form contents, no cookies.
• Analytics (only with your consent)Privacy-friendly, aggregated usage statistics. See the Cookie Policy for details.

We do not intentionally collect special categories of data (health, beliefs, etc.). Please do not include such data in an e-mail to us.

E-mail correspondence is kept for up to 18 months from your last contact with us, after which it is deleted, unless a longer period is required for a contract or by law (for example invoicing and accounting records). Error reports are kept for 90 days. A Shoebox waiting list entry is kept until we have told you Shoebox is ready, or until you ask us to remove it. A weekly update subscription is kept while you are subscribed; when you leave, we keep your address marked as unsubscribed, so it is never sent the update again, until you ask us to erase it. You can ask for deletion sooner at any time.

By default your data is stored and processed on servers in the EU/EEA. We do not transfer personal data outside the EU/EEA unless adequate safeguards are in place, and we will say so here if that ever changes.

We use a small number of carefully chosen service providers, each bound by a data-processing agreement (DPA):

Website hosting

DigitalOcean App Platform, Amsterdam (AMS) region.

Database

Supabase. Holds the Shoebox waiting list and the weekly update’s subscribers.

E-mail sending

Resend. Sends the weekly update and the e-mail that confirms your subscription.

Error monitoring

Sentry, EU data residency (de.sentry.io). Receives error reports only.

Analytics (only with your consent)

PostHog, EU-hosted (eu.posthog.com).

We never sell your personal data and we do not use it for third-party advertising.

Under the GDPR you have the right to access your data; correct it; have it erased; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior lawful processing). To exercise any of these, e-mail [email protected].

You also have the right to lodge a complaint with the Belgian supervisory authority: the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, [email protected].

We may update this policy as Kuberdon grows. The current version and its date will always be shown here.