Privacy Policy
Effective September 28, 2026
This policy explains how Steven Goff (“we”) operates Pencilday at pencilday.com and handles information used for scheduling. Questions or requests: steven@webtownhero.com.
Information you provide
We store what you enter to schedule: titles, descriptions, locations, proposed dates, times and options, time zones, names, votes, sign-ups, comments, answers to organizer questions, and, where you choose to give them, email addresses. Organizers may enter the email addresses and names of people they invite; organizers are responsible for having permission to do so. For booking pages we store the owner’s availability settings and each booking’s time, name, email, time zone and answers. If you sign in, Clerk handles authentication and account information such as your email address, name, profile image, and connected sign-in providers, and we keep a copy of your name, email and notification preference.
How we use information
We use this information to run the service: showing polls and booking pages, recording responses, sending the emails you or an organizer trigger (invitations, reminders, confirmations, calendar invites, activity notifications, results, and organizer-link recovery), preventing abuse, and helping signed-in users find their activity across devices. Signing in can attach anonymous polls and responses stored in the same browser to your account. We do not sell personal information, show ads, or use your information to train AI models.
Who can see what
Poll and booking links are shareable. Anyone with a poll link may see its details, participant names, comments and results, subject to the organizer’s settings; hidden responses stay hidden until the poll closes. Email addresses and answers to organizer questions are visible only to the organizer and to the person who gave them. On booking pages, other visitors see only open times, never who booked. Link previews may show a title and description.
Transactional email is sent through Brevo. Reminder and notification emails include an unsubscribe link; unsubscribing stops them for that address. Emails you directly trigger, such as a booking confirmation, are still sent. We record delivery status and bounces to keep sending reliable.
Calendar access
If you connect Google Calendar (permission calendar.freebusy) or Microsoft Outlook (permission Calendars.ReadBasic), Pencilday reads only the busy times on your calendar for the dates in question. We use them to show you conflicts and to hide busy times on your own booking pages. We do not read event titles or attendees for display, do not store the busy times, and do not show them to anyone else. Clerk holds the connection tokens; you can disconnect at any time in your account settings or in your Google or Microsoft account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Calendar invites we email are standard .ics attachments; we do not write to your calendar.
Providers
Cloudflare hosts the site, protects forms with Turnstile, and processes request logs such as IP addresses. Neon stores the database. Clerk provides accounts. Brevo delivers email. Google and Microsoft provide sign-in and calendar data when you connect them. These providers process information only as needed to deliver their services. Information may also be disclosed when required by law or to protect users and the service.
Cookies and browser storage
Pencilday stores organizer and response-edit tokens in your browser so guests can return and manage their activity; the database stores only hashes of these tokens. Clerk uses cookies to keep you signed in. Turnstile may use browser signals to tell people from bots. We don’t use advertising or cross-site tracking cookies.
Retention and your choices
Polls, booking pages and bookings remain until deleted. Organizers can delete polls and remove responses or comments; booking page owners can cancel bookings and delete pages. Deleting removes the associated data from the active database; provider logs and backups may persist under their retention practices. Email logs are kept for up to 12 months. You may use polls without an account. To access, correct, or delete your information, email us and identify the account, poll or booking; we may need to verify your authority first.
Security, children and changes
We use HTTPS, hashed access tokens and access controls, but no system is completely secure. The service is not intended for children under 13. We will update the date above when this policy changes.