Your data, plainly.

plonk stores the plan you make, the answers you give, and — only if you opt in — your email address. No ads, no tracking pixels, no selling anything to anyone, no account required. Emails are opt-in, one click to stop, and stopping also deletes your address.

A plan holds its title, emoji, candidate dates, settings, the first names respondents type, their yes / if-need-be / can’t answers, and timestamps. That’s the product — the group sees names and answers because that’s what deciding together means.

If you tick a consent box, plonk also stores your email and exactly which boxes you ticked, with timestamps. Your email is never shown to the group and never leaves the server in any API response.

When a plan is created, plonk also notes the rough region it came from (country and city, derived from the network address — the address itself is never stored). That feeds aggregate statistics like “how fast do groups decide”, is never shown per plan or per person, and never leaves the server.

Each consent is separate: a ping when the date is decided, tentative calendar holds, or occasional product news. You get exactly what you ticked, nothing bundled. Every email carries a one-click unsubscribe that also deletes your stored address on the spot.

Holds are placeholder invites sent from plonk’s own calendar account. plonk never connects to, reads, or touches your calendar — you simply receive invites, and they cancel themselves when dates get ruled out.

Logging in sets one httpOnly session cookie for up to 90 days. That’s the only cookie. Your browser’s local storage remembers your own plans and name on your device — that data stays on your device.

Analytics are aggregate and cookie-free (page counts and anonymous funnel counters — how many people reached each step, never who).

plonk runs on Vercel (hosting), a managed Postgres database (storage), Resend (email delivery), and Google Calendar (the holds). Each processes only what its job needs.

The unsubscribe link in any email deletes your address and revokes all consents immediately. Your answers stay counted — they’re part of the group’s plan — but they carry only the name you typed, which you can change any time by updating your answers.

If plonk has never emailed you, it never had your email — the only personal data in play is the name you chose to type.

You also have the full GDPR set: access, correction, erasure, portability, and the right to complain to your local data protection authority. Reply to any email plonk has sent you and a human will sort it out.

Full erasure works like this: your name is replaced with an anonymous placeholder everywhere it appears, your email, consents and login data are deleted, and any calendar holds are cancelled. The group’s plan keeps adding up — it just no longer says who you were.

plonk (plonk.day) is made in Denmark. Data protection questions: reply to any plonk email, and it reaches the maker directly.