Privacy
Last updated 28 August 2026
Daycrane keeps birthdays and other yearly dates, and emails you before they arrive. That means holding personal data — some of it about people who are not you. This page says what there is, who else sees it, and how to get rid of it.
Who we are
Daycrane is the data controller for everything on this page. For anything here, including a request to see or delete what we hold, write to support@daycrane.com.
What we hold
| What | Detail | How long |
|---|---|---|
| Your account | Your email address, the name you give us, and when the account was made. | Until you delete the account. |
| Your settings | Time zone, language, which emails you want, and which day and hour the digest goes out. | Until you delete the account. |
| Your days | For each date: a name, the day and month, the year if you gave one, the kind, and any note you added. | Until deleted, or until the list holding them is. |
| Your lists | A list name, and who belongs to it. | Until you leave. A list with other members stays with them. |
| Sign-in sessions | A session token, and the IP address and browser your sign-in came from, which Better Auth records. | 90 days, refreshed while you keep visiting. “Sign out everywhere” ends them at once. |
| Google sign-in | If you sign in with Google: your Google account id, and the tokens Google issues so we can identify you. We ask Google for your email address, name and profile picture, and nothing else. | Until you delete the account. |
| Invitations | The address you invite, and a one-way hash of the invitation link. If the invitation is declined, the address is kept so we never write to it again. | Invitations expire after 14 days. A refusal is kept until the account is deleted. |
| Sent email | Which kind of email went out, for which week or day, whether it worked, and the error if it did not. Not the contents. | Until you delete the account. |
| Calendar feeds | The address of each feed you create, what you called it, and when. | Until you revoke it or delete the account. |
| Abuse counters | To stop somebody being email-bombed through us, we count sign-in requests against a one-way hash of the address, and feed requests against a hash of the feed address. Neither can be turned back into the thing it counts. | Deleted every hour. |
We do not ask for a date of birth, a phone number, an address, or a payment method. There is no advertising, no profiling, and nothing is sold or shared for anyone else’s purposes.
Dates about other people
This is the part worth reading twice. A birthday list is a list of other people, and those people did not sign up for anything. If somebody has added you to a list, we hold the name they typed, the date they typed, and any note they wrote — nothing else about you, and no way to contact you.
The person who added you controls that entry, so asking them is both faster and more likely to be what you want. If that is not possible, write to support@daycrane.com and we will remove it.
When somebody shares a list, the dates in it become visible to everyone in that list. Leaving a list takes your own entries out of it for everybody. A list with other members in it stays with them when you leave or delete your account, because those dates are theirs too.
Who else sees it
Cloudflare
The whole product runs on Cloudflare, a cloud infrastructure provider: the site, the database that holds everything in the table above, and the service that sends the email. Cloudflare processes it on our instructions.
Fathom Analytics
We count visits to the public pages — this one, the landing page, the sign-in page — using Fathom Analytics. Fathom sets no cookies and does not build a profile of you across sites. Nothing behind sign-in is measured. Once you are signed in, no analytics of any kind run: not on your days, not on your settings, not anywhere.
Only if you choose to sign in with Google, in which case Google knows you signed in to Daycrane. If you sign in with an emailed code instead, Google is not involved at all.
That is the complete list. No other third party receives anything — the typefaces are served from our own domain specifically so that loading a page tells nobody else you were here.
Cookies
One, to keep you signed in. Two more are set briefly when you first arrive, remembering your time zone and language so a new account starts with sensible settings. None of them are for advertising or tracking.
What you can do
- Take everything with you. Settings has an export that hands you every date you can see as a CSV, at any time and without asking us.
- Delete everything. Also in Settings. It removes your account, your settings, your feeds and your sessions immediately, along with every list nobody else is in. The screen says exactly what will go before it goes.
- Stop the email. Every email has a one-click unsubscribe, and the link in it changes what you get without signing in.
- Correct it. Everything we hold about you is editable in the app.
If you are in the UK or the EU, these are your rights of access, rectification, erasure and portability. You do not need to invoke them by name; the buttons do the same thing. If something is not working, write to support@daycrane.com, and you may complain to your national data protection authority.
Changes
If this page changes in a way that matters, we will say so in the Changelog and, where the change affects what we do with your data, by email. The date at the top is when it was last true.