Privacy Policy
Effective date: September 9, 2026
WhosBringing helps people organize potlucks and group events. This policy explains what information we collect, why, and what you can do about it. We've tried to write it like a human, because you're one.
Who runs this
WhosBringing is owned and operated by The Snook Agency. If you have any question about your data or this policy, email us at tyler@snookagency.com and a real person will answer.
What we collect
If you're a host (you created an account to make sign-up sheets): your email address and password (stored encrypted — we never see it in plain text); the events you create (names, dates, locations, descriptions, item lists, headcount numbers); your subscription and billing status if you're on a paid plan. Card details are handled entirely by Stripe — we never store your card number.
If you're a guest (someone shared a sign-up link with you and you claimed an item): your name and email address; what you signed up to bring, and any dietary tags you added. That's it. We don't ask for anything we don't need to run the sign-up.
Why we collect it
- To make the product work (show the sheet, track who's bringing what, send confirmations).
- To email you — a guest gets one confirmation email with a link to change or cancel; hosts may send invite emails through us to their own guests; we use your email for these transactional messages only.
- To handle payment, if you're a paying host.
We do not sell your data. We do not share it with advertisers. A guest's email is used to send their confirmation and nothing else — we won't add them to a marketing list.
Who can see what
A guest's name and what they're bringing are visible to other guests on the same sheet — that's the point of a shared sign-up. A guest's email address is visible to the host of that event and to us; it is not shown to other guests. Private events are reachable only by their direct link and are not indexed by search engines.
Who we share data with (our processors)
We use a few trusted services that process data on our behalf and only for that purpose:
- Supabase (database and account hosting)
- Resend (sending confirmation and invite emails)
- Stripe (payment processing, paid plans only)
- Lovable (application hosting)
We don't share your data with anyone else unless the law requires it.
How long we keep it
Host account and event data: until you delete the event or your account. Guest sign-up data: until the host deletes the event or the sign-up, or until you ask us to remove it. We don't keep data longer than we need to.
Your rights
Wherever you live, you can see what data we hold about you, correct anything that's wrong, and delete your data. Guests can cancel a sign-up through the link in their confirmation email, which removes their entry. Hosts can delete events or their whole account. Or email us and we'll do it.
If you're in the EU/UK (GDPR) or California (CCPA), those laws give you these rights explicitly, and we honor them for everyone regardless of where you are. We don't sell personal information, so there's nothing to opt out of on that front — but you're welcome to confirm that with us.
To exercise any of these, email tyler@snookagency.com. We'll respond within 30 days.
Children
WhosBringing isn't directed at children under 13, and we don't knowingly collect their data. If a child has signed up as a guest and you're their parent or guardian, email us and we'll remove the entry.
Security
We use encryption in transit, hashed passwords, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable steps to protect your information and we don't collect sensitive data we don't need.
Changes
If we change this policy, we'll update the date at the top and, for meaningful changes, note it on the site. Continued use after a change means you accept the updated policy.
Contact
Questions, requests, or concerns: tyler@snookagency.com.