Privacy Policy

1. Introduction

Welcome to Nomad Cruise Program Planner ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our calendar planning application.

2. Information We Collect

2.1 Information You Provide

• Calendar ID (Token): A unique identifier automatically generated to save your event selections. This token is stored locally in your browser and can be used to restore your picks on other devices.
• Event Selections: Information about which events you choose to add to your personal calendar.

2.2 Information from Google Calendar Integration

When you connect your Google Calendar, we request permission to:

• Create and manage events in your Google Calendar
• Access basic profile information (name, email address)
• Read and write calendar events

Important: We only access your Google Calendar to sync your selected events. We do not read, store, or access any other calendar events that you have not explicitly selected through our application.

2.3 Automatically Collected Information

• Browser Information: Browser type, device timezone, and screen size to provide the best user experience
• Usage Data: Information about how you interact with our application to improve functionality
• Cookies: We use cookies to store your calendar token and user preferences locally

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our calendar planning service
• Synchronize your selected events with your Google Calendar
• Remember your preferences (timezone, view mode, etc.)
• Generate personalized ICS calendar files for export
• Improve and optimize our application's performance
• Respond to your support requests and inquiries

4. Google Calendar Integration

4.1 OAuth 2.0 Authentication

We use Google's OAuth 2.0 authentication system to securely connect to your Google Calendar. This means:

• We never see or store your Google password
• You can revoke our access at any time through your Google Account settings
• All connections are encrypted and secure

4.2 Data Minimization

We follow the principle of data minimization. We only request the minimum permissions necessary to sync your selected Nomad Cruise events to your Google Calendar. We do not:

• Read your existing calendar events
• Access calendars other than the one designated for Nomad Cruise events
• Share your calendar data with third parties
• Use your calendar data for advertising or marketing purposes

4.3 Token Storage

Google OAuth tokens (access tokens and refresh tokens) are securely stored in our database with encryption. These tokens are used solely to sync your selected events and are never shared with third parties.

5. Data Storage and Security

5.1 Where We Store Your Data

• Local Storage: Your calendar token and preferences are stored in your browser's local storage
• Cookies: We use cookies to maintain your session and remember your preferences
• Cloud Database: Your event selections and Google OAuth credentials are stored securely in Vercel's cloud infrastructure

5.2 Security Measures

We implement industry-standard security measures to protect your information:

• HTTPS encryption for all data transmission
• Encrypted storage of OAuth tokens
• Secure API endpoints with authentication
• Regular security updates and monitoring

5.3 Data Retention

• Event selections are retained as long as you use your calendar token
• Google Calendar connections can be disconnected at any time, and we will immediately delete your OAuth tokens
• Inactive accounts (no activity for 12 months) may have their data automatically deleted

6. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We may share your information only in the following limited circumstances:

• Service Providers: We use Vercel for hosting and Google for calendar integration. These providers are bound by strict confidentiality agreements.
• Legal Requirements: If required by law, court order, or government regulation to comply with legal processes.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you would be notified beforehand).

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access: View all event selections associated with your calendar token
• Modify: Change your event selections at any time
• Delete: Clear your calendar token and start fresh
• Export: Download your selected events as an ICS file
• Disconnect: Remove Google Calendar integration at any time

7.2 Revoking Google Access

To revoke our access to your Google Calendar, you can either:

• Click "Disconnect Google" in our application sidebar, or
• Visit your Google Account Permissions page and remove access to Nomad Cruise Program Planner

7.3 Cookie Management

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our application, such as remembering your calendar token.

8. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using our service, you consent to the transfer of your information to our facilities and to the third parties with whom we share it as described in this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Displaying a prominent notice in our application
• Sending an email notification (if you're a Google Calendar connected user)

Your continued use of our service after any changes indicates your acceptance of the updated Privacy Policy.

11. Google API Services User Data Policy

Nomad Cruise Program Planner's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we commit to:

• Only requesting the minimum scope necessary for functionality
• Using data only for providing or improving user-facing features
• Not transferring data to third parties (except as necessary to provide our service)
• Not using data for serving advertisements
• Not allowing humans to read user data unless explicitly permitted by the user or required for security purposes

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within 30 days.