Privacy

Last updated August 29, 2026

CitySpan shows you the local time and weather for people you keep up with. It needs to know who you are, who is on your lists, and where those people are. That is the whole of it — there is no advertising here, no analytics tracking you across the web, and nothing about you is sold or rented to anyone.

What we store

Your account. Your email address, and — if you signed in with Google — the name and profile picture Google gives us. There is no password: sign-in is a link emailed to you, or a Google sign-in where that is offered, so there is no password on file to lose.
Your sessions. A sign-in token, its expiry, and the IP address and browser that created it. That last pair is what lets you see and end a session you do not recognise.
Your groups. The name of each group you create or join, who else belongs to it, and the display names, places and notes on its roster. A roster entry for somebody who has not signed up holds a display name only — never their email address.
Invitations you send. The address you invited, the group, and when the invitation expires.
Your own place and preferences. The city you tell us you are in, your clock format and your theme. Your place is asked for, never guessed from your IP address, and it is yours rather than any group’s.

Signing in with Google

Where CitySpan offers Google sign-in and you choose it, we ask Google only for your name, email address and profile picture, and we use them only to create and identify your CitySpan account. We do not read your Gmail, your Drive, your calendar or your contacts, and we never ask for permission to.

CitySpan’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer that information to anyone else, do not use it for advertising, and do not use it to train machine-learning models.

Who else sees it

Only the services CitySpan needs to run. Each gets the least it can do its job with.

Neon hosts the database, so it holds everything above.
Vercel runs and serves the app, so requests to it pass through their infrastructure and appear in their logs.
Resend delivers sign-in links and invitations, so it receives the address a message is going to and the message itself.
Google, if you sign in with Google — the exchange described above.
open-meteo.com answers the forecast and place-search requests. It receives coordinates and search text, never who is asking.
openstreetmap.org answers the one request behind “Use my location” on the welcome screen: it turns the coordinates your browser gives us, with your permission, into the name of the town you are in. It receives those coordinates and nothing else — not who is asking — and we do not store them. What is saved is the city you then pick from the list.
frankfurter.dev answers currency-rate requests. It receives no information about you at all.

The typefaces are served from CitySpan’s own domain rather than a font network, so opening a page does not announce your visit to anybody not on this list. Beyond it, we disclose information only where the law requires it.

How long we keep it

Your account and your groups stay until you ask for them to go. Sessions expire on their own once they lapse.

An invitation is marked used rather than deleted. The address it was sent to, the group, who sent it and when all stay on record — that record is how a roster entry can say who claimed it and on whose invitation. Deleting the group deletes its invitations with it, and so does deleting the account of the person who sent them.

Deleting your data

Write to privacy@cityspan.app from the address on your account and we will delete it, along with the groups only you belong to, and confirm when it is done. Ask the same way for a copy of what we hold, or for a correction to it. Depending on where you live you may have further rights over that data; ask and we will honour them.

Children

CitySpan is not intended for children under 13, and we do not knowingly collect their information.

Changes

If this policy changes, the date at the top changes with it, and we will email you before any change that materially affects what we do with what we already hold.

Contact

CitySpan is a small independent project. privacy@cityspan.app reaches a person who can answer for it.