Privacy Policy

Who this is

Cue is a personal, hobby-built calendar app made and run by one person (Tarmo Sari) - not a company, and not built to monetize your data. Questions or requests about your data can go straight to [email protected].

What Cue collects, and why

• Signing in: Cue uses "Sign in with Google" to authenticate you, getting your email address and name from Google. Your email is hashed the instant it arrives - the real address is never stored, only a one-way hash of it, enough to recognize your account again. The sign-in only ever requests the minimum (openid email profile); Cue never asks for access to your Gmail, Drive, Contacts, or anything else in your Google account.
• Account activity: when you first signed up, your most recent login, and how many times you've opened the app.
• Your preferences: the timezone and country you set, and the list of sports and shows you choose to follow - this is what makes your calendar yours.
• Calendar subscription link: if you turn on "Subscribe from Google/Apple Calendar" in Settings, Cue generates a private link with a random token in it. Anyone with that exact link can see your followed events without signing in - that's how calendar URL subscriptions work. You can regenerate it at any time from Settings, which invalidates the old one.
• Sign-in attempts: every login attempt, successful or not, is logged with a hash of the email Google returned, whether it succeeded, and the IP address it came from - purely to see who's trying to get in, not to track your usage.
• Feedback: if you use the Feedback button, your message, a hash of your email, submission time, and IP address are stored so it can be replied to.

What Cue doesn't do

No ads, no analytics or trackers, no selling or sharing your data with anyone for marketing, and no access to any Google data beyond the basic sign-in fields above.

Where fixture data comes from

The sports fixtures and TV air times on your calendar come from open sources - public websites and specialized APIs. These return facts about matches and episodes, not anything about you.

How long data is kept

If an account hasn't been opened in 60 days, it - and everything tied to it (follows, settings, feedback, login history) - is automatically deleted, not just archived. You don't need to do anything for this to happen. Want it gone sooner? Email [email protected] and it'll be deleted on request instead of waiting out the 60 days.

Security

Sessions are authenticated with a signed, HTTP-only cookie - the signing key isn't shared anywhere. All traffic is served over HTTPS.

Changes

This page will be updated if what Cue collects changes. Since this is a small, personal project, check back occasionally rather than expecting a notification.