Privacy

Last updated: 11 November 2026

Who we are

Team Vacation Planner. Contact: contact@stanese.ro.

What we store

For each team: the team name, members' names, country and region, vacation days and half days, allowances, groups, comments, an optional logo, and an activity log. We also store hashed PINs (never the PIN itself). To let teams undo mistakes, we keep earlier versions of each team (at most one per hour while it changes, plus one before large deletions); anyone with the team link can see them, but a removed member who had a PIN is never shown or restored from them. For security, we keep failed PIN attempts (no IP address) and failed admin sign-in attempts with the IP address, for one day, and a count of new teams per IP address for one day. We count visits by country, worked out from your browser's time zone, without storing your IP address. Our hosting provider processes IP addresses in its server logs to deliver the site and protect it from abuse.

Why, and on what basis

To run the planner you asked for (GDPR Art. 6(1)(b)). Colleagues added by someone else are processed for our and the team's legitimate interest in planning absences (Art. 6(1)(f)). The same basis covers security logs and site administration.

Who can see it

Anyone with the team link can see the team, including through the calendar and spreadsheet exports. A PIN only stops others from changing a member's days. The site administrator can see and manage all teams to give support, deal with abuse and handle deletion requests; admin actions are logged. We do not sell data and do not use ad networks or trackers. The planner shows a link to Workoșenie, another tool by the same maker, and a plain link to Buy Me a Coffee (no script or tracking is loaded from it).

Your browser

We keep your preferences, your list of teams, team owner keys and temporary PIN sessions in your browser's storage. They stay on your device and are used only to make the tool work. No cookies are used, except a sign-in cookie for the site administrator.

How long

Teams are deleted 24 months after they are created. A deleted team stays restorable for 30 days and is then erased. Earlier versions of a team are erased after 30 days, at once when the team is erased, and on request (we then also remove you from them). The admin action log is kept for 12 months. Security attempt logs are kept for one day.

Where

Data is hosted by Vercel Inc. (website) and Neon (database). Where data is processed outside the EU, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Before you add colleagues

Tell them, and don't enter reasons for absence or health details.

Your rights

You can ask to see, correct or delete data about you, or object to its use, by writing to contact@stanese.ro with the team link. You may also complain to your data protection authority (in Romania: ANSPDCP, dataprotection.ro).