Privacy notice
The short version: there is no account to create, nothing to sign up for, and no advertising. Visit statistics are collected only if you expressly allow them. Your calendar is built inside your own browser, so the title you type and the dates you pick never reach us at all.
Last updated: 26 August 2026.
Who is responsible
The data controller is Epacta Kereskedelmi és Szolgáltató Betéti Társaság (Epacta Bt.), 7634 Pécs, Ércbányász u. 32., Hungary, company registration number 02-06-074432. You can reach us at [email protected]. Full company details are on the imprint page.
Because the operator is established in the European Union, the General Data Protection Regulation (GDPR) applies to everything described here, wherever in the world you are reading from.
What happens when you make a calendar
Nothing is uploaded. The PDF is assembled by JavaScript running on your own device, from settings that stay on your device. Titles, dates, the language you choose, the country whose holidays you mark — none of it is transmitted to us, and none of it is stored anywhere but in the page you have open. Close the tab and it is gone.
This is not a policy choice we could quietly reverse; it is how the site is built. There is no server-side rendering and no database.
What is stored on your device
Calendarloom itself uses your browser's local storage for two things:
- Your light or dark appearance choice, so the site does not flash the wrong colours next time. It never leaves your device.
- Your analytics answer — whether you allowed or declined measurement — so you are not asked again on every page.
Clearing your browser data removes both.
Analytics — only if you say yes
We would like to know which pages help people, and we use Google Analytics 4 for that — but only with your consent. The way it is built is stricter than the usual banner:
- Until you press Allow, no Google script is loaded and no analytics cookie is set. Not a reduced "cookieless" mode — nothing at all.
- If you press No thanks, we remember the refusal (on your device) and never ask again.
- If you allow it, Google Analytics records page views and rough, non-identifying context (country, browser type, screen class), plus three events of our own: a PDF download, a print, and a PDF build that failed. Those carry the sheet's settings — view, calendar language, holiday country, paper size, week start, which options were on — and never the title you typed or anything written on the sheet. We use it for aggregate statistics only. We do not use it for advertising, and Google Signals and ads features are off.
- You can change your answer any time with the Analytics choice link in the footer; withdrawal takes effect from your next page load.
The legal basis is your consent (GDPR Article 6(1)(a)). Google processes this data as our processor; their terms are in the Google privacy policy.
Who else your browser talks to
A few requests leave your browser while you use the site. Each is listed here with what it involves and when it happens.
| Service | What for | When | What they see |
|---|---|---|---|
| Cloudflare, Inc. | Hosting and content delivery | Every visit, because the site is served from their network. | IP address, browser user agent and the pages requested, in standard server logs. |
| Nager.Date | Public holiday data | Only when you choose a country and year that is not in our own stored copy. | Your IP address and the year and country you asked for. Nothing identifying you. |
| Open-Meteo | Town and city search for the planner | Only if you type a place name into the daily planner’s location box. | Your IP address and the text you typed. |
With one consent-gated exception — Google Analytics, described in its own section below — we run no advertising, no social media pixels and no tag managers, and no external fonts or scripts load from anyone else.
Server logs
Our hosting provider records standard web server logs — the IP address a request came from, the page requested, the time, and the browser's user agent. These exist to keep the site running and to defend it against abuse. We do not use them to build a profile of you, we do not combine them with anything else, and we do not attempt to identify you from them.
The legal basis is our legitimate interest in operating a working, secure website (GDPR Article 6(1)(f)).
If you use the location feature
The daily planner can print sunrise, sunset, moonrise and moonset times, which need a place to be about. There are two ways to give it one:
- Your browser's location. Your browser asks your permission first, and the coordinates are used on your device only. They are not sent to us or to anyone else.
- Searching for a town. The text you type is sent to Open-Meteo's geocoding service to be turned into coordinates. Only that text and your IP address are involved.
Neither is stored. Reload the page and the planner has forgotten.
If you email us
Mail sent to [email protected] is forwarded to the operator's mailbox and kept for as long as the matter needs, and no longer. We use it only to answer you. The legal basis is our legitimate interest in responding to enquiries, or the steps taken at your request before a contract (GDPR Article 6(1)(f) and (b)).
What we never do
- We do not sell personal information, and we do not share it for cross-context behavioural advertising. For readers in California: this is a statement of fact about how the site works, not merely an opt-out you have to exercise.
- We do not build advertising or marketing profiles, and analytics — if you allowed it — is used for aggregate statistics only.
- We do not send marketing email. There is no mailing list.
- We do not knowingly collect anything from children. The site needs no personal data from anyone, of any age.
Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent where processing rests on consent.
In practice there is usually very little for us to act on, because we hold almost nothing: no account, no profile, no stored settings. If you have emailed us, that correspondence is the exception, and we will act on any request about it. Write to [email protected] and we will answer within 30 days.
Complaints
If you think we have handled your data wrongly, please tell us first — it is usually the quickest way to put something right. You also have the right to complain to a supervisory authority. In Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) (Hungarian National Authority for Data Protection and Freedom of Information):
- 1055 Budapest, Falk Miksa utca 9–11, Hungary
- Postal address: 1363 Budapest, Pf. 9
- Telephone: +36 1 391 1400
- https://www.naih.hu
If you live elsewhere in the European Union, you may complain to your own national authority instead.
Changes
If what the site does with data changes, this page changes with it and the date at the top is updated. We will not quietly start collecting something and leave this text as it was.