Privacy notice

When you consent to analytics cookies, we collect information about how you use our website through Google Analytics 4, including pages visited, time spent on pages, and user interactions. This helps us understand how visitors use our site and improve the user experience.

When you consent to advertising cookies, we collect information to serve personalized advertisements through Google AdSense. This may include your interests and browsing behavior to show you relevant ads.

We automatically collect certain technical information including your IP address, browser type, device information, and referring website. Analytics only sees an anonymised version of the IP address, while our firewall log keeps the full IP address for 120 days. This information is necessary for the website to function properly.

What you type in the search box stays on your device. It is used to filter the list in your browser and is not sent to us or stored.

These cookies are necessary for the website to function and cannot be switched off. They are usually only set in response to actions made by you, such as setting your privacy preferences or filling in forms.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site.

These cookies may be set through our site by our advertising partners. They may be used to build a profile of your interests and show you relevant ads on other sites.

We use Google Analytics 4 to understand how visitors interact with our website. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. For more information, visit Google's Privacy Policy.

We use Google AdSense to display advertisements on our website. Google may use cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google's Ads Settings.

To delete data collected by Google Analytics, you can:

• Opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
• View and delete your Google activity at My Activity: https://myactivity.google.com/

Note: Deleting your Google activity will affect all Google services, not just this website.

To manage or delete data collected by Google AdSense, you can:

• Manage your ad personalization settings at Google Ads Settings: https://adssettings.google.com/
• View and delete your ad-related activity at My Activity: https://myactivity.google.com/
• Opt out of personalized advertising across the web at aboutads.info: https://optout.aboutads.info/

To delete data stored locally on your device:

• Clear your browser cookies and site data for this website
• Use the 'Manage cookie preferences' link in the footer to withdraw your consent

Clearing cookies will remove your consent preferences and you will see the consent banner again on your next visit.

When you sign in, we keep these things:

• Sign-in: you sign in with a link or a six-digit code that we email to you. We never ask you to make a password.
• User ID: a random code we create for you. It ties your favourites and plan to you. It is not your name or your email address.
• Sign-in record: our sign-in service (Amazon Cognito) keeps its own record of you. It holds your email address and a username it makes up.
• Email address: we use it to sign you in, and for nothing else. If we ever want to email you for any other reason, we will ask you first with a separate choice, and every such email will have an unsubscribe link.
• First name: only if you type one in. We use it to greet you.
• Language: the one you choose. We use it to open the site in that language next time.
• Favourites: the ideas you save with the heart.
• Your plan and notes: the ideas you place on dates, and the notes you write.
• Dates: when you last used the site and when your data last changed. We use them to delete old data automatically.

We do not store your password, surname, picture, phone number, birthday, address or country.

When you ask for a sign-in link, we send one email, and only to the address typed into the form. Anyone can type an address that is not theirs, so if you get a sign-in email you did not ask for, you can ignore it: nothing happens unless the link or code in it is used.

• Sending: sign-in emails are sent through Amazon SES, a service of Amazon Web Services, in Frankfurt (Germany).
• Link and code: each works once and expires after 15 minutes. We keep only a scrambled copy (a hash) of them, which cannot be turned back into your address or the link. The record is removed shortly after the link or code is used or has expired (normally within a day or two).
• Suppression list: if an email to you bounces or is reported as spam, Amazon SES puts the address on a suppression list so that we do not send to it again. The list holds only the address. Use the contact form if you want an address taken off it. We also count bounce and complaint notices to keep an eye on the sending, and those counts do not contain any addresses.
• Abuse protection: to limit abuse, we keep a keyed hash (a scrambled copy) of the IP address of sign-in requests for about two hours, and a keyed hash of the typed address for about a minute after each request to stop repeated sending. The records are then removed automatically, normally within a day or two.
• Staying signed in: you stay signed in for 30 days after you last used the site on that device. Logging out ends the session on this device at once; a sign-in token that was already issued can stay valid for up to an hour.
• Deleting your account: go to My plan, press “Delete my account and data”, and confirm with a fresh sign-in link or code. Everything is deleted at once, including your email address in our sign-in service.

• Your sign-in, email, favourites, plan, notes and language are used to give you the service you asked for (GDPR Article 6(1)(b)).
• Your first name is optional. By typing it in, you consent to us using it to greet you (GDPR Article 6(1)(a)). You can remove it at any time.
• We count accounts, lists and saved ideas as anonymous totals, because we have a legitimate interest in knowing whether this feature is used (GDPR Article 6(1)(f)).

Once a day, we count how many people saved each idea. The counts have no names and no user IDs. An idea is shown on the Most loved page only when at least 3 people saved it, so nothing identifies anyone.

If you turn it on in your profile, we send one email every Friday during the season with your plan for the coming week: each night's idea, the props and the set-up steps. We read your email address from your sign-in when we send; we do not store a copy. Every email has a link to stop it, and you can switch it off in your profile at any time. Complaints and bounces switch it off automatically.

If you do not use the site for 400 days, your data is deleted automatically, and so is your email address in our sign-in service. If you delete your account, your data is deleted at once. Only the deletion marker described below stays.

A backup copy can survive for up to 7 days after deletion. We use it for nothing else.

When an account is deleted, a small deletion marker stays for about 2 days, and at most about 4. It holds only a random user ID, nothing else, and is then removed automatically.

On My plan, you can download your data and delete your account yourself. You can also change your first name, language, favourites and notes there. For anything else, use the contact details below.

Signing in is for adults, such as parents and guardians. Please do not write children's names or personal details in your notes.

While you are signed in, a small token is kept in your browser's local storage so you stay signed in. It is strictly necessary for signing in, and it is removed when you log out.

While you are signed in, your browser’s session storage can hold a small flag that only remembers that your language choice was already handled. It is removed when you close the tab. While the page that opens your sign-in link loads, session storage also holds the data from that link for a moment; it is cleared at once.

Our firewall records every request to the site for 120 days, including the full IP address (it is not anonymised) and the path of the page requested.