GDPR by design
Pikato is built so that privacy is the default, not a setting. Here is exactly what we collect, why, where it lives, and how long it stays.
Anonymous by default
Creating a poll and responding to one never requires an account, a login, or any tracking. Participants provide only a display name and their availability. If an organiser invites you by email, we store that address so we can send the invitation — see “Email invitations” below. Polls you create are also listed in your own browser’s local storage, so you can find the organiser link again on this device. That list never leaves your browser and is never sent to us — clear your browsing data and it is gone.
Data minimisation
We store only what the poll needs: the event title and optional description, the organiser’s name and email (used solely to send transactional notifications), the proposed time slots, participant display names, and their Yes/Maybe/No answers. Nothing more.
Retention & automatic deletion
Every event carries an expiry date — by default 90 days after creation, or 30 days after a time is finalised. A scheduled job permanently deletes expired events and all of their slots, participants and responses. Data does not linger.
Email invitations
Organisers can send invitations from Pikato with credits, instead of sharing a link. Doing so stores the invitee’s email address against that poll, and it is deleted with the poll on the same retention schedule as everything else. So the organiser knows who still needs a nudge, we count opens and clicks on those emails: a timestamp and a counter, nothing else. No IP address, no device or browser details, no profile, and never across polls. Invitation emails say this in their footer, and organisers can switch tracking off.
Right to erasure
Deleting an event immediately and permanently purges all of its participant data in cascade. There is no soft-delete or hidden archive.
EU data residency
Application hosting and the PostgreSQL database run in the EU. Our transactional email provider is EU-resident. There are no non-EU CDNs and no transfer of personal data outside the EU.
No third-party trackers
No advertising pixels, no cross-site trackers, no profiling, and no external fonts or scripts that could leak your IP address to another company — fonts are self-hosted. We do count page visits, using a self-hosted Umami instance on EU servers operated by the same controller as Pikato, so your visit is never handed to a third party. It sets no cookie and stores no IP address: the address is used only in passing, to derive a country and a visit identifier that is reset every day, so nothing links your visits from one day to the next or to any other website. The only cookie used is a session cookie for the developer account area. Email invitations are the one exception, and are covered below.
Secure by design
- ✓Link tokens are opaque, high-entropy secrets — only a SHA-256 hash is stored, compared in constant time.
- ✓All traffic is HTTPS with HSTS enforced.
- ✓API keys carry fine-grained scopes; webhooks are signed with a per-endpoint HMAC secret and timestamped against replay.
- ✓Idempotency keys prevent duplicate submissions.
- ✓IP addresses are used only transiently for rate limiting and are never persisted beyond the throttle window.
Lawful basis & your rights
We process data on the basis of the legitimate interest (or contract) of running the poll the organiser started. Email is transactional only — never marketing. You may request access to, or erasure of, the data held about you at any time.
Controller: Fifteenpeas · pikato.eu — contact the organiser of a poll, or privacy@pikato.eu, to exercise your rights.