Privacy Policy

Last updated: April 6, 2026

1. Who we are

Make Plans is operated by Geoffrey Bachelet and is accessible at makeplans.ca. For any privacy-related questions or requests, contact us at [email protected].

2. What data we collect and why

Account data

When you create an account, we collect your email address and a hashed password. This is necessary to provide you with a secure, personal account (legal basis: performance of a contract).

Event and activity data

We store the content you create on Make Plans: event details, RSVP responses, poll responses, and any display names you provide. This data is necessary to operate the service (legal basis: performance of a contract).

Discord connection (optional)

If you choose to connect your Discord account, we receive your Discord username, avatar, and Discord user ID from Discord. This is optional and only collected with your explicit action (legal basis: consent). You can disconnect Discord at any time from your account settings.

Server logs

Like any web service, our hosting provider automatically records IP addresses, browser type, and pages visited as part of standard server operation. These logs are retained for a limited period for security and diagnostic purposes (legal basis: legitimate interests).

Cookies

We use only the following cookies, which are necessary for the service to function:

Cookie Purpose
Session cookie Keeps you logged in during your visit
CSRF token Protects against cross-site request forgery attacks
Remember-me cookie Keeps you logged in across visits (only if you opt in on the login page)

We do not use analytics cookies, advertising cookies, or any third-party tracking.

3. Who we share your data with

We do not sell or rent your personal data. We use the following third-party services to operate Make Plans:

Service Purpose Location
DigitalOcean Hosting and data storage Canada (Toronto)
Fastmail Transactional email delivery Australia (servers in the United States)
Discord Optional OAuth login and bot integration United States

Each of these providers is bound by their own privacy policies and applicable data protection law.

4. International data transfers

Fastmail and Discord are based outside Canada and the European Economic Area, and process data in the United States. When your data is transferred internationally, we rely on appropriate safeguards — including standard contractual clauses where applicable — to protect your information.

5. How long we keep your data

We retain your personal data for as long as your account is active. If you delete your account, your personal data will be deleted within 30 days, except where retention is required by law or for legitimate security purposes (e.g. server logs).

6. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data ("right to be forgotten")
  • Portability — request your data in a machine-readable format
  • Objection — object to certain types of processing
  • Withdrawal of consent — where processing is based on consent (e.g. Discord connection), you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are in the European Economic Area and believe we have not handled your data in accordance with the GDPR, you have the right to lodge a complaint with your local data protection authority.

If you are in Quebec, you may also file a complaint with the Commission d'accès à l'information du Québec (CAI) under Loi 25 (Act respecting the protection of personal information in the private sector).

7. Children

Make Plans is not intended for anyone under 16 years of age, in accordance with our Terms of Use. We do not knowingly collect personal data from children under 16.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or a notice on the service at least 30 days before they take effect.

9. Contact

Geoffrey Bachelet — Make Plans
[email protected]