Privacy Policy

Last updated 2026-09-24

SlotSheet lets people make and fill in sign-up sheets without accounts. We collect as little as possible. This page explains what we store, why, who else processes it, and your rights.

Who we are

SlotSheet is run by the SlotSheet team, based in the Sultanate of Oman. Contact and data protection enquiries: slotsheet.help@gmail.com.

What we store

• Sheets: the title, description, optional organizer name, optional location, time zone, settings, and the slots you create.
• Sign-ups: the name someone types, an optional note, the number of spots taken, the slot chosen and the time of signing up.
• Secret Santa groups: the group name, optional budget, exchange date and message, the names the organizer types, who gives to whom, whether and when each name was picked, and any wish list a participant writes.
• Meeting polls: the title, optional description and place, the time zone, the days and times offered, whether the poll is open, the time the organizer picks, and each answer: the name someone types, the times they mark and when they answered.
• Private links: organizer, sign-up, Secret Santa and poll-answer links contain a secret code. We store only a one-way hash of it, never the code itself.
• Abuse prevention: a one-way code derived from your network address with a secret that changes every day. We use it to limit how many requests one network can make and keep it with a sheet, group or poll you create. We do not store your IP address itself.
• Reports: if you report a sheet, group or poll, we store the reason, your explanation, any contact details you choose to give, and a one-way code for your network (part of your address, not the address itself) so that one person cannot count as many reporters. It is kept with the report and deleted with the sheet, group or poll.

We do not ask for email addresses, phone numbers, passwords or payment details. Please do not put sensitive information on a sheet or in a group, such as health details, ID numbers or anything about children beyond a first name.

Stored in your browser

To remember which sheets, groups and polls you organize, which sign-ups, Secret Santa names and poll answers are yours, and the name you last used, SlotSheet saves small items in your browser's local storage. They stay on your device and are only sent to us with your own requests. You can clear them at any time in your browser settings. See the Cookies and storage page for the full list.

Who can see a sheet

Anyone who has a sheet's link can see its content and, unless the organizer switched names off, the names and notes of the people who signed up. If you sign up while names are hidden, your name stays hidden from others even if the organizer switches names on later. The organizer can see all entries and download them. Sheets are not listed publicly and are hidden from search engines.

Who can see a meeting poll

Anyone with a poll's link can see its title, description, place, the days and times offered, and every answer: the names people typed and the times they marked. The organizer can remove answers and pick the final time. Polls are not listed publicly and are hidden from search engines.

Who can see a Secret Santa group

Anyone with a group's link can see the group name, budget, date, message, the list of names and which names have been picked. Who you are buying for, and the wish list of that person, are shown only to you, after you pick your own name on your device or with your private link. The organizer's page shows who has picked a name and when, never who drew whom. Your wish list is shown to the person who drew you, never on the group page. Whoever picks a name sees that name's match and wish list, which is why each name can be picked only once: if your name is already taken, the organizer can reset it. The draw is stored on our servers so each person can see their own match; we do not look at it. Groups are not listed publicly and are hidden from search engines.

Why we use this information

• To provide the service you asked for: creating, showing and updating sheets and sign-ups.
• To keep the service safe: stopping spam and abuse, and handling reports.
• To fund the service with advertising, as explained below.
• To meet legal obligations, for example responding to lawful requests from authorities.

Service providers

• Cloudflare, Inc. hosts the website and database, protects it from attacks, counts visits with Cloudflare Web Analytics (which uses no cookies) and runs Turnstile, a human check used when creating sheets, Secret Santa groups or meeting polls and when sending reports. Cloudflare processes IP addresses to deliver and protect the site. Cloudflare's privacy policy.
• Google serves the ads through Google AdSense, as described in the next section.

We do not sell personal information.

Advertising

SlotSheet is free because it shows ads served by Google AdSense. Google and its partners use cookies or similar technology to show ads and measure them, and, where the law allows, to personalize ads based on your visits to this and other websites. In the European Economic Area, the United Kingdom and Switzerland we ask for your consent first, using Google's certified consent message, and you can change your choice at any time with the "Privacy choices" link at the bottom of every page.

Learn more in how Google uses information from sites that use its services. You can turn off personalized ads in My Ad Center, and opt out of many third-party vendors at aboutads.info.

Where your information is processed

Cloudflare and Google operate worldwide, so your information is processed outside the Sultanate of Oman, including in the United States and the European Union. By using SlotSheet you consent to this transfer. Both providers commit contractually to protecting the data they process.

How long we keep it

• Sheets, their sign-ups and any reports about them are deleted automatically 12 months after the last date on the sheet, or 12 months after it was created if it has no dates.
• Secret Santa groups, their draw and wish lists are deleted automatically 60 days after the exchange date, or 120 days after the group was created if it has no date.
• Meeting polls and their answers are deleted automatically 60 days after the last date in the poll, or 180 days after creation for polls on days of the week. People can remove their own answer while the poll is open.
• Organizers can delete a sheet, group or poll at any time, and people can cancel their own sign-up while the sheet is open.
• Rate-limiting records are deleted automatically, normally within 2 days.

Your rights

Depending on where you live, including under the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022) and the EU and UK GDPR, you can ask to access, correct or delete your information, object to its use, or withdraw consent. Because there are no accounts, please send the link to the sheet, group or poll and the name used so we can find the entry: slotsheet.help@gmail.com. We reply within 30 days. You can also complain to your data protection authority; in Oman this is the Ministry of Transport, Communications and Information Technology.

Children

SlotSheet is not directed at children. You must be at least 13 years old (16 in the European Economic Area) to use it. Organizers should not use it to collect personal information about children beyond what is strictly needed, and sign-ups for children should be made by a parent or guardian. If we learn that we hold a child's information in breach of these rules, we delete it.

Security

All traffic is encrypted with HTTPS, private links are stored only as one-way hashes, and requests are rate-limited. If a data breach is likely to put you at risk, we will notify the relevant authority within 72 hours and inform affected people where required.

Changes

If we change this policy we will update the date at the top, and point out important changes on the home page.