What I keep, and why.
This is my personal booking page. Friends use it to pick a time for Roblox or FaceTime. Here's what I collect, what I do with it, and how to get rid of it. Plain English on purpose.
What I collect
- what you type: name, mobile number, and — only if you want — email and a short note.
- the booking: activity, date, time, length, and the time zone your browser sent so times look right.
- the code: I text you a one-time code. I only store a hash of it, and it's gone within a day.
- tech junk: your IP goes to Cloudflare Turnstile to prove you're a person and to slow down spam. it is not stored with your booking.
That's the whole list. No account. No password. No profile.
How I use it
- to hold your slot and put it on my calendar.
- to text you: a code, a confirmation with your private link, reminders, and a heads-up if anything changes.
- so you can move or cancel with that link.
- to keep the site working and keep bots out.
Nothing gets used for ads. Nothing gets sold, rented, or shared for marketing. Ever.
Text messages
You say yes to texts when you enter your number and tap “Text me a code”. Texts are only about your booking: a one-time verification code, a confirmation with your private link, reminders before we start, and a notice if the session moves or cancels. Message frequency depends on your bookings — usually a few texts per booking, and none when you have nothing scheduled. Msg & data rates may apply.
Reply STOP to any message to opt out; you'll get one confirmation text and nothing more. Reply START to opt back in, or HELP for help. Texts go through Twilio. Full program rules live in the SMS section of the terms.
Your mobile number and your consent to receive texts are never shared with third parties or affiliates for marketing or promotional purposes.
Who else touches it
- Cloudflare — hosts the site, holds the database (US), runs the captcha, and locks my admin login.
- Twilio — sends and receives the texts. They keep their own delivery logs under their policy.
- Apple iCloud — my calendar. Your booking shows up there with your name, number, and any note/email so I know who I'm meeting.
- Cloudflare Web Analytics — only if I turn it on. Page views, no cookies, no fingerprinting across sites.
Nobody else. I don't sell, rent, or trade your info.
How long I keep it
- name, number, email, note: deleted about 30 days after the session. The home page shows the current window.
- one-time codes: within a day.
- text log (for delivery troubleshooting): 30 days, encrypted.
- activity log (booked / moved / cancelled, number masked): 180 days.
- calendar event on my iCloud stays like any other calendar thing. Want it gone? ask me.
How it's protected
- HTTPS only.
- Your name, number, email, and note are encrypted at rest (AES-256-GCM). The key lives in Cloudflare's secret store.
- Your private link is a long random token. Only a hash is stored.
- Admin sits behind Cloudflare Access, checked on every request.
- Found a hole? See security.txt.
Your choices
- move or cancel anytime with the link in your confirmation text.
- reply STOP to stop texts.
- skip email and note — both optional.
- email me to see or delete what I have. I'll handle it in a few days.
Kids
This isn't for kids under 13, and I don't knowingly keep their info. If one booked, email me and I'll wipe it.
Changes
If this page changes, the date up top changes too. Anything big gets a note on the home page.
Contact
Kyle Marten · hello@kylemarten.info
Security: security@kylemarten.info