Privacy

Who we are

DueYear is published by CodeYaz. The controller of your personal data is CodeYaz, Eemstraat 38, 5704 MR Helmond, the Netherlands. You can reach us at hello@dueyear.com with any question about this page.

What we collect

When you join the waitlist, we store:

• your email address;
• the date and time you joined;
• the state you picked in the form, or the state named in your calendar answers, if there is one.

We don’t store your IP address or write it to our logs, and we don’t store details about your browser. To limit abuse of the signup and sign-in forms, the checkout button and the calculator’s and the calendar’s counts, a one-way hash of your IP address is held in memory for a short time; it is not written to disk.

When you subscribe

When you subscribe for a company, we store:

• your email address and the time your account was created;
• the company name you enter and the answers you gave the calendar for it;
• Stripe’s IDs for you as a customer and for the subscription, its status, the end of the paid period and whether it is set to end then;
• when you agreed to the renewal terms and which version of the Terms you agreed to.

Between pressing the button and finishing checkout, the company name and the answers are held on our server; if you do not pay, they are deleted within a few days.

To handle each notice from Stripe once, we keep its ID, its type and when we handled it, and nothing else from it.

Signing in

When you ask for a sign-in link, we store a one-way hash of the link’s code, when it stops working and when it was used. When you sign in, we store a one-way hash of your session’s code, when it started and when it ends.

We don’t ask for an EIN, a Social Security number or bank details.

The calculator runs in your browser. The numbers you enter in it are not sent to us or stored. When a calculation finishes, the page tells our server that one was completed and which kind of result it showed. We keep a daily count of these. The count holds no numbers from the form and nothing that identifies you or your browser. If your browser sends a Global Privacy Control or Do Not Track signal, the page does not send this.

The company calendar runs in your browser. The answers you give it are not sent to us or stored, unless you subscribe for that company. When it shows a result, the page tells our server which kind of result it showed, and, if you go on to checkout from the calendar, that someone did. We keep a daily count of these. The count holds none of your answers and nothing that identifies you or your browser. If your browser sends a Global Privacy Control or Do Not Track signal, the page does not send this. If you join the waitlist from the calendar, we store your email address, the time you joined and the state named in your answers.

How we use it

We use your email address to tell you when the full calendar opens, and occasionally about product updates and changes to the rules we track. Each of these emails has a link that takes you off the list. We also note when we sent you the opening email. The state you pick tells us which states to cover next.

We use your account’s email address to send you sign-in links; the company’s calendar when you subscribe; reminders before the dates in it; a notice before each renewal; a confirmation when you cancel; and a note when a rule behind the calendar changes and we update our record of it. We use the company name and answers to show and email that company’s calendar. Each reminder and rule note has a one-click link that turns them off for that company; the renewal notice and the cancel confirmation still come, as part of the subscription.

For each of these emails we store which company it was for, what kind it was, for a reminder the rule and the date it was about and how many days before, when it was sent and the id our email provider gave it, so the same email is not sent twice. We don’t store the email’s content or your address with it. If you turn reminders off, we store when.

The site has no advertising, analytics or tracking scripts, and loads nothing from other companies’ servers.

Cookies

When you sign in, we set one cookie, dueyear_session, that keeps you signed in. It holds a random code, not your email address, and lasts 30 days or until you sign out. The site sets no other cookie; the calculator, the calendar and the guides work without one.

On your device

If you switch between the light and dark theme, your choice is saved in your browser so the site looks the same on your next visit. It stays on your device and is not sent to us.

If you go on to checkout from the calendar, the answers you gave it are kept in that browser tab, so they are still on the calendar page if you come back without paying. They are removed when the calendar page reads them back, or when you close the tab.

Service providers

The site and the waitlist database run on servers we rent from Hetzner. The waitlist is not kept with a mailing-list company.

The site is delivered through Cloudflare, which sits between your browser and our servers. Cloudflare processes your IP address and the requests you send, including the waitlist form, to deliver the site and to block abuse, and keeps its own logs.

Payments are handled by Stripe. At checkout, Stripe receives your email address, card details and billing address under its own privacy policy and calculates sales tax; your card details do not reach us.

Emails are sent by Resend: sign-in links, the calendar, reminders, renewal notices, cancel confirmations, rule notes and the waitlist’s opening email. Resend receives your email address and the email’s content.

Legal basis

We store your email address, the time you joined and the state you picked on the basis of your consent (Art. 6(1)(a) GDPR). You give it by joining the waitlist and can withdraw it at any time by writing to us. We limit abuse of the signup form on the basis of our legitimate interests (Art. 6(1)(f) GDPR). We store what your subscription needs, and send sign-in links and the subscription’s emails, to perform our contract with you (Art. 6(1)(b) GDPR).

How long we keep it

We keep your waitlist entry until you ask us to delete it.

We keep your account and its companies until you ask us to delete them. A record of when you agreed to the renewal terms may be kept longer where the law requires it.

The record of the emails sent for a company is deleted with the company.

Your rights

You can turn off reminders and rule notes, or leave the waitlist, with the link in each email. Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to withdraw consent at any time. Write to hello@dueyear.com and we will answer within 30 days. You also have the right to lodge a complaint with your supervisory authority (Autoriteit Persoonsgegevens).

Contact

CodeYaz, Eemstraat 38, 5704 MR Helmond, the Netherlands — hello@dueyear.com.