Privacy

How BroThrow handles your information

Plain language, no surprises. This instance is run by an independent organizer; this page describes how the software works.

What we collect

• Hosts: name, email, and a password (stored only as a salted scrypt hash).
• Guests: a name and your answer. Email or phone is optional and only collected if the host asks for it, so they can reach you about the plan.
• Plans: what the host enters — title, date, location, and sign-up spots.

Please don't put medical or other sensitive personal details into notes. BroThrow doesn't need them to coordinate help.

Who can see what

• Plans are never listed publicly and are hidden from search engines. Only people with the private link can open one.
• The host sees every response, including any contact details guests choose to share.
• Other guests see only what the host allows: full names, first names, or no names at all.
• The host can require a passcode, hide the address until someone RSVPs yes, close the link to new guests, or replace it with a new one.

Signing in and notifications

• Guests never need an account.
• Hosts can sign in with Google, Facebook, or Microsoft (when the server offers them), an emailed link, or a password. From those providers we keep only your name, email, and the provider's account id. We never see or store your password for those services, and we don't post anything to them.
• Updates are opt-in. Guests can choose email updates or app notifications for a plan. Notifications travel through your browser's push service (for example Google or Apple) and contain only the plan title and the message. Turn them off anytime; every email has a stop link.

Cookies

We use only essential cookies: one to keep hosts logged in, one to protect forms from forgery, and one per plan that remembers your own response so you can change it. There are no analytics, ads, or third-party trackers.

Changing or removing your information

Guests can update or remove their own response and sign-ups at any time from the invitation page or their personal link. Hosts can delete a plan, which removes all responses and sign-ups for it. Deleting a host account deletes everything that host created.

Plans are automatically deleted some time after they end (the server operator sets the retention period).

Important limitations

• An invitation link works like a key: anyone who has it can open the plan. Share it only with people you trust, or add a passcode.
• Your personal response link lets anyone who has it change your response. Keep it to yourself.
• Data is encrypted in transit (HTTPS) but is not end-to-end encrypted. The server operator can access the database and its backups.
• Traffic passes through Cloudflare, which provides the secure connection to this site.