Privacy Policy

1. Who We Are

Gameplanning.net is a personal project run by Geir, based in Norway. The site helps small groups of friends coordinate gaming sessions by sharing availability and creating events.

Contact: geir@gameplanning.net

2. What Data We Collect

We collect only what is necessary to run the service:

• Account data: your username and email address when you register.
• Availability and RSVP data: the dates you mark as available and your responses to events.
• Session data: a session cookie that keeps you logged in between visits.
• Server logs: IP addresses and request timestamps, retained briefly for security and debugging.

3. How We Use Your Data

Your data is used solely to operate the service:

• To authenticate you and maintain your session.
• To send transactional emails: account verification and password reset links, delivered via Mailjet.
• To display your availability and event RSVPs to other members of your group.
• To identify and fix technical problems.

We do not use your data for marketing, profiling, or advertising.

4. Third-Party Services

We use the following third-party services to operate the site:

• Mailjet (Sinch) — email delivery for transactional messages. Your email address is passed to Mailjet for this purpose. See mailjet.com for their privacy policy.
• MongoDB Atlas — database hosting. Your data is stored on MongoDB Atlas servers. See mongodb.com for their privacy policy.

We do not sell or share your personal data with any other parties.

5. Legal Basis for Processing (GDPR)

As a service operated from Norway, we process your data under the following legal bases under GDPR:

• Contract: processing your account data and availability is necessary to provide the service you signed up for.
• Legitimate interests: server logs and security measures are necessary to keep the service operational and secure.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data will be removed from our systems within 30 days.

Server logs are retained for a short period (typically a few weeks) and then deleted.

7. Cookies

We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function and contains no tracking or advertising data. No third-party cookies are set by the site itself.

8. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority.

To exercise any of these rights, contact us at geir@gameplanning.net.

9. Changes to This Policy

If we make significant changes to this policy, we will update the effective date at the top. Continued use of the site after changes constitutes acceptance of the updated policy.