Privacy Policy

This policy explains what personal data Catsitter processes and why. The service is a free leisure / hobby project with data minimization: accounts use passkeys (no email or password stored).

Controller

The operator named in the Imprint is the data controller.

Who can access plan content

A care plan is reached via its share link. Anyone can create a free account (passkey) and, if they have the link, open the plan while logged in. The link can be copied and forwarded by any participant. There is no closed invite-only gate: knowledge of the link plus any account is enough to see plan name, care instructions, slots, assignments, chat, and related content. Treat the link as a secret only if you accept that it may spread.

Signed calendar URLs expose schedule-related fields and may include care instructions (not chat) to whoever holds that URL. The print view of a plan exposes the same kind of plan content for printing or sharing offline.

Data we process

• Account: a random user id, optional display name, WebAuthn public key material, the time and version of the Terms of Service you accepted.
• Care plans: plan name, share slug, care instructions, time slots, and assignments.
• Plan membership: which plans you opened while logged in, and last access time (used to list your recent plans).
• Chat messages written inside a care plan.
• Optional Web Push subscriptions (endpoint and encryption keys) if you enable notifications.
• Strictly necessary technical session cookie to keep you logged in (Art. 6(1)(b)/(f) GDPR); theme preference in local storage on your device (not sent as tracking).

Purposes and legal bases

We process this data to provide the care-coordination service (Art. 6(1)(b) GDPR), based on your acceptance of the Terms of Service when creating an account, and for the strictly necessary session cookie and security of the service based on contract performance and legitimate interest (Art. 6(1)(b) and (f) GDPR). Push notifications are only activated after you grant permission in your browser.

Chat contributions

By posting in a care-plan chat, you grant the plan participants (anyone with the link and an account) and the service operator a non-exclusive, worldwide, royalty-free right to store, display, and process that message content solely for operating and documenting the shared care plan. This license continues after you delete your account for messages that remain in a plan you did not own.

If you delete your account, your chat messages on other people’s plans are not erased: the text stays for continuity of care coordination, but your display name is removed and the author is shown as a former member (pseudonymization). Messages in care plans you owned are deleted together with those plans. Slot assignments (“Zusagen”) are cleared when your account is deleted.

Hosting, location, and operators

The application and database run on the operator’s own server (typically in the EU/EEA; exact location depends on the hosting setup chosen by the operator named in the Imprint). The operator can access stored data as needed to run, secure, or discontinue the hobby project. No advertising or analytics trackers are used.

Encrypted backups may be stored on the same server and, if the operator configures an optional offsite copy, on that backup destination. In that case the offsite storage provider acts as a processor or recipient for backup copies only.

Retention and deletion by the operator

Account data is kept while your account exists. Care plans inactive for 90 days may be deleted automatically. Encrypted backups are retained for up to 30 days. The operator may also delete accounts, plans, or the entire database when shutting down or securing the project—subject to applicable law. After you delete your account, credentials and owned plans are removed promptly; pseudonymized chat on other plans may remain until those plans are deleted or purged; backups age out with the 30-day window.

Your rights

You can export your data or delete your account at any time under Settings. You may also contact the controller (see Imprint) regarding access, rectification, restriction, objection, or complaint to a supervisory authority.

Passkeys

Login relies solely on passkeys stored on your device. If you lose all registered passkeys, account recovery is not possible — please register a second passkey on another device when you can.