Privacy Policy
Last updated: April 6, 2026
1. Who we are
Make Plans is operated by Geoffrey Bachelet and is accessible at makeplans.ca. For any privacy-related questions or requests, contact us at [email protected].
2. What data we collect and why
Account data
When you create an account, we collect your email address and a hashed password. This is necessary to provide you with a secure, personal account (legal basis: performance of a contract).
Event and activity data
We store the content you create on Make Plans: event details, RSVP responses, poll responses, and any display names you provide. This data is necessary to operate the service (legal basis: performance of a contract).
Discord connection (optional)
If you choose to connect your Discord account, we receive your Discord username, avatar, and Discord user ID from Discord. This is optional and only collected with your explicit action (legal basis: consent). You can disconnect Discord at any time from your account settings.
Server logs
Like any web service, our hosting provider automatically records IP addresses, browser type, and pages visited as part of standard server operation. These logs are retained for a limited period for security and diagnostic purposes (legal basis: legitimate interests).
Cookies
We use only the following cookies, which are necessary for the service to function:
| Cookie | Purpose |
|---|---|
| Session cookie | Keeps you logged in during your visit |
| CSRF token | Protects against cross-site request forgery attacks |
| Remember-me cookie | Keeps you logged in across visits (only if you opt in on the login page) |
We do not use analytics cookies, advertising cookies, or any third-party tracking.
3. Who we share your data with
We do not sell or rent your personal data. We use the following third-party services to operate Make Plans:
| Service | Purpose | Location |
|---|---|---|
| DigitalOcean | Hosting and data storage | Canada (Toronto) |
| Fastmail | Transactional email delivery | Australia (servers in the United States) |
| Discord | Optional OAuth login and bot integration | United States |
Each of these providers is bound by their own privacy policies and applicable data protection law.
4. International data transfers
Fastmail and Discord are based outside Canada and the European Economic Area, and process data in the United States. When your data is transferred internationally, we rely on appropriate safeguards — including standard contractual clauses where applicable — to protect your information.
5. How long we keep your data
We retain your personal data for as long as your account is active. If you delete your account, your personal data will be deleted within 30 days, except where retention is required by law or for legitimate security purposes (e.g. server logs).
6. Your rights
Depending on where you live, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Portability — request your data in a machine-readable format
- Objection — object to certain types of processing
- Withdrawal of consent — where processing is based on consent (e.g. Discord connection), you may withdraw it at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you are in the European Economic Area and believe we have not handled your data in accordance with the GDPR, you have the right to lodge a complaint with your local data protection authority.
If you are in Quebec, you may also file a complaint with the Commission d'accès à l'information du Québec (CAI) under Loi 25 (Act respecting the protection of personal information in the private sector).
7. Children
Make Plans is not intended for anyone under 16 years of age, in accordance with our Terms of Use. We do not knowingly collect personal data from children under 16.
8. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or a notice on the service at least 30 days before they take effect.
9. Contact
Geoffrey Bachelet — Make Plans
[email protected]