Legal

Privacy policy

Collandar shows the people in your group when you are busy. It is built so that they see as little as possible beyond that. This page explains what we collect, why, and what you control. Last updated 23 October 2026.

Who runs Collandar

Collandar is operated by Dominic Salas (Ottawa, Canada) at cal.dvsalas.com. Questions about this policy or your data go to dom@dvsalas.com.

What we collect

• Account details. Your first and last name, email address and, if you choose to add it, a phone number. We use them to sign you in, to show your name to the groups you join, and to help you recover your account.
• Groups. The groups you create or join, their names, and who else is in them.
• Calendar data. When you connect a calendar, we read the start and end time of each event and, where the provider gives it, the event's title, location and description, so that you can choose to reveal them later. We never read attachments or attendee lists, and we never write to or change your calendar unless you explicitly use a two-way feature.
• Technical logs. Standard server logs (IP address, browser, time of request) kept briefly for security and debugging.

What other people see

By default, members of your group see only busy blocks: a time range, your name and the colour you picked. They do not see event titles, locations, descriptions or which calendar an event comes from. You can opt in to share details for a whole calendar or for a single event, and you can leave any calendar unshared. Nobody outside your groups can see anything about you.

Google calendar data

If you connect a Google account, Collandar requests read-only access to your calendars (the calendar.readonly scope) or, if you choose two-way sync, access to create and update events (calendar.events). We use this data only to display availability to the groups you are in and to let you reveal individual events to them. Collandar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not let humans read it except with your permission, for security, or as required by law. Disconnecting a Google calendar deletes the data we hold from it.

Other calendar providers

iCloud, Outlook and calendar links (ICS) are handled the same way: we store the event data needed to show availability and refresh it periodically. Credentials such as app-specific passwords and secret calendar URLs are encrypted at rest and used only to fetch your calendar.

Where data is stored and who processes it

Collandar runs on Vercel and stores its database with Neon, both in the United States. Email such as sign-in codes and confirmation links is delivered through Resend. These providers process data only on our instructions. We do not sell personal data or share it with advertisers.

How long we keep it

Account and group data stays while your account exists. Calendar data is refreshed in place and old events are removed as they fall out of the window we display. When you disconnect a calendar, its data is deleted. When you delete your account, everything tied to it is deleted within 30 days, apart from minimal logs.

Your choices

• Choose which calendars to share and whether to reveal details, per calendar and per event.
• Disconnect any calendar at any time from Settings.
• Leave any group at any time.
• Export or delete your account by emailing dom@dvsalas.com until self-serve deletion ships.

Cookies

Collandar uses one cookie, which keeps you signed in. There are no advertising or third-party analytics cookies.

Children

Collandar is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will note the date above and, for significant changes, tell you by email or in the app.