Whens BestPrivacy policy
Last updated 8 November 2026 · Draft pending legal review
In short: guests can use Whens Best with only a typed name. Anyone with an event's link can see the name and answers you give, so use a first name or nickname if you'd rather. We hold what's typed into an event, your answers, a device identifier, and, if you choose to sign in, your email address. Your calendar stays on your phone. Adverts are personalised only if you agree.
Who we are
Whens Best is run by Marcus Craske, a sole trader in the United Kingdom trading as Nullsloth, who is the controller of your personal data. Contact us at [email protected].
What we hold and why
| Data | Why | Kept | Basis |
|---|---|---|---|
| Event details: name, place, notes, times, theme, logo | Showing the event, to anyone with its link | A year after its last date | Legitimate interests |
| A guest's typed name and answers | Showing the results to anyone with the link | A year after the event's last date | Legitimate interests |
| A device identifier: random, not tied to your phone | Letting you change your answers | 12 months idle | Legitimate interests |
| Email address, only if you sign in | Signing you in, and the everyone-has-replied email | Until you delete your account, or 2 years idle | Contract |
| Logo images, signed-in only | Showing on your events | Until no event or preset uses them, then removed within the hour | Legitimate interests |
| Reports and contact messages | Acting on them | 12 months | Legitimate interests |
| App launches and crash reports | Keeping the app working | 365 days and 30 days | Legitimate interests |
| Requests | Security and limits; IP addresses are counted, never kept | 30 days in logs, without IP address or event code | Legitimate interests |
| Advertising data | Paying for the app | Google's terms | Consent for personalised ads and web cookies |
Your calendar
Busy times are only ever read on your phone, and only if you turn the setting on and allow it. They're used to shade your own row, held in memory, and never sent to us, to our analytics or to crash reports. Titles aren't kept or shown.
What we don't do
We don't collect your location, contacts, camera or microphone. We don't sell your data. We don't send marketing email. We never email guests: only the person signing in.
Children
Whens Best is for general use and isn't directed at children. Personalised adverts are for people 13 or over.
Your rights
You can ask for access to, correction or deletion of your data, object to or restrict how it's used, and complain to the Information Commissioner's Office (ico.org.uk). Write to [email protected]. A guest with no account has no way to prove a row is theirs, so we act on the event's link and the name, or ask its organiser. Signed-in people can delete their account in Settings.
Other companies and transfers
On the web, adverts come from Google AdSense. In the UK, the EEA and Switzerland, Google's own consent message asks before adverts load whether you agree. If you don't, only limited adverts show: they aren't personalised, though Google still uses your IP address to deliver them, and may use cookies or similar storage only to detect fraud and invalid traffic. You can change your answer at any time in Settings.
We use Google (adverts), Apple and Google (stores), Amazon SES (email), Discord (a private contact forum) and Cloudflare (delivery). Transfers outside the UK are under the UK IDTA or Addendum, standard contractual clauses or adequacy.