Privacy policy

This page explains, in plain language, what Year Edition ("we", "us") stores, why, and what control you have. If anything is unclear, contact us.

The short version

• Your photos are shrunk in your browser before upload, and their hidden data (including GPS location) is removed.
• Your calendar is shared by link: anyone you give the link to can see it and its photos.
• We don't run ads, we don't use tracking cookies, and we don't sell your data. We count page visits with privacy-friendly, cookie-free analytics.
• You can remove anything at any time, and ask us to delete your whole account.

What we store

• Photos: a resized copy (about 1080 pixels on the long side) and a small thumbnail of each photo you add, plus the day it's placed on. The original file never leaves your device.
• Trips: the name, start and end dates and color you choose.
• Flights and train rides: the places you type, the date, and the distance if you add it.
• Account: if you sign up, your email address. Your password is handled by our login provider and stored only in hashed form; we can't see it.
• Messages: if you use the contact form, your name, email and message.

What we don't store

• The original photo files.
• Photo location (GPS), camera details or any other hidden photo data: these are removed in your browser before upload.
• Your contacts, your camera roll or anything you don't choose to add.

Who can see your calendar

Your calendar has a link that contains a long random ID. Anyone who has that link can view your calendar, your trips, your journeys and your photos. Individual photos are also reachable by their direct image address. So please only add photos you're comfortable sharing with the people you send your link to.

Personal calendar pages are marked so search engines don't index them, and they aren't listed anywhere on the site.

Only you can add, change or remove things on your calendar. This is enforced on our database for every request.

Guest calendars

You can start without an account. We create an anonymous guest account that lives in your browser. If you clear your browser data or switch devices before signing up, you won't be able to get back into that guest calendar. Signing up keeps everything you've already added.

Where your data lives

• Database, file storage and login: Supabase.
• Website hosting and visit counts: Vercel (Vercel Web Analytics).

Both are established cloud providers that process data on our behalf to run the service. All connections use HTTPS.

Cookies and browser storage

We store your login session and your theme choice (light or dark) in your browser's local storage. We don't use advertising or analytics cookies.

Analytics

We use Vercel Web Analytics to see how many people visit and which pages are popular. It doesn't use cookies, doesn't follow you to other sites, and only gives us totals (for example page views, country and device type), not who you are. It never sees your photos or calendar.

How long we keep data

We keep your calendar until you remove it. Things you remove are deleted from our database straight away; removed photo files are deleted a few seconds later (after the "Undo" option expires). Contact messages are kept as long as needed to answer them.

Deleting your data

• Remove any photo, trip, flight or train ride from your calendar at any time.
• To delete your whole account and everything in it, email elayabharathi.in@gmail.com from the address you signed up with, or use the contact form. We'll confirm when it's done.

Children

Year Edition isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date at the top of this page. Big changes will be announced on the site.

Contact

Questions about privacy? Email elayabharathi.in@gmail.com.