Privacy Policy

👋 Overview

Holiday Optimizer runs primarily in your browser. This policy explains what data is processed, where it lives, and which third-party services are involved.

🔒 Data Usage and Storage

Here's what happens to your data:

• Plans, preferences, and custom time-off data (company days, pre-booked days, and custom holidays) are stored in your browser's local storage
• Your selected country, state, region, and weekend preferences are stored locally
• Analytics consent is stored locally and can be cleared by clearing browser storage
• Holiday calculations run locally using the bundled date-holidays library
• No holiday requests or country codes are sent to external APIs
• The planner does not request or store your name or email unless you purchase the export

Only what's needed to run the app is processed.

🗂️ Calendar Files & Retention

When you start the optional calendar export (currently available to U.S. customers only), break data is sent to a private AWS Lambda function that creates the ICS file and stores it in a private S3 bucket under a random token. Files and download links expire after a short retention window (typically about 48 hours). To validate the export, a temporary file is generated before checkout, but the download link is only issued after payment is confirmed. The contents of your plan are used only to build the file and are not stored in a database.

💳 Payments, Emails & Stripe

Payments are processed by Stripe, which collects the billing information required to complete the transaction (email, payment method, and billing address where required). The service receives the checkout email to issue the download link. That email is sent via Resend and isn't stored in the app. Resend may retain delivery logs under their policies—see Resend's Privacy Policy for details. Stripe retains its copy of the data under their policies—see Stripe's Privacy Policy for details. If you want Stripe customer data deleted, contact support at support@waqarbinkalim.com and the maintainer can delete the Stripe Customer object when possible, or contact Stripe support directly. Stripe may retain certain records for legal or compliance reasons.

📊 Analytics

PostHog Analytics (US region) is used for privacy-focused, anonymous usage analytics. Autocapture and session recording are disabled. PostHog stores a random identifier in local storage to distinguish visits, respects Do Not Track, and may process IP addresses to infer coarse location per PostHog's policies.

Analytics load only after you grant consent, and no marketing cookies are used.

For more information about PostHog's data practices, please refer to PostHog's Privacy Policy.

The site is hosted on Cloudflare Pages, and Cloudflare may provide Cloudflare Web Analytics as part of hosting. For more information, seeCloudflare Web Analytics andCloudflare's Privacy Policy.

🔄 Updates

This privacy policy may be updated occasionally to reflect changes in how data is handled. Any updates will be reflected in the “Last updated” date at the top of this page. Users are encouraged to review this policy periodically.