YOUR WORDS. YOUR PLANS.

A little clarity about your data.

The calendar needs your writing to work. Understanding how people find Pencil Away doesn’t.

Your calendar

Writing without an account stays in this browser’s site storage. When you sign in, your calendars and changes are also stored on our AWS backend so they can sync across devices. Members of a shared calendar can see and change its writing. Invitations require the recipient to choose Join.

Account sign-in uses Amazon Cognito. Subscriptions are handled by Stripe; payment-card details are entered on Stripe’s checkout. Calendar and account records are separate from usage measurements.

Browser usage measurement

We measure visits to our public pages, opening the calendar, trying the guide, first writing, and account entry points. A random browser identifier lasts up to 30 days. A short queue can retry measurements if a connection fails. This helps us understand whether people discover the calendar and find it useful.

Attribution uses a limited campaign label, traffic-source category, and the hostname of the website that sent you here. We don’t collect your calendar words, travel dates, email, invite links, sign-in codes, full page URLs, or IP addresses in these measurements. The website’s hosting and security services still receive the connection information needed to serve requests.

Your choice applies to this browser. Do Not Track and Global Privacy Control signals also turn browser measurement off. Turning it off clears its queued measurements and random identifier; it doesn’t remove your calendar or sign you out.

Service operation counts

The server separately counts successful writing changes, accepted invitations, and paid calendar subscriptions. These counts use keyed, pseudonymous account and calendar identifiers to avoid counting retries twice. The measurement database does not store names, email addresses, payment-card details, calendar words, or travel dates.

Turning off browser measurement stops future browser measurements. Previously recorded measurements and their source attribution remain until their normal expiry. The server’s operation counts continue separately. Individual measurement records and dated totals are scheduled to expire after 90 days. First-touch browser profiles expire after 30 days; pseudonymous account and calendar milestone records expire after 90 days without activity. Expiry cleanup can take additional time. Protected database backups can retain earlier records for up to 35 additional days. The private administration page shows aggregate results, not individual calendar contents.

Keep control of your plans

Wait for changes to sync before clearing your browser’s site data. “Saved on this device” means writing may not yet have reached the server or your partner.