We built it so there is almost nothing to keep.

• No tracking. No ads. No analytics SDK, on the web or in the app.
• Your location is used to find what is near you, then it is gone. It is not stored and not tied to you.
• A plan lives inside its own link. We do not keep a copy.
• Nothing is sold, rented or shared for marketing. Ever.

When you tap “Use where I am”, your device's coordinates are sent to our server once to name your town and to find events and places nearby. For the scene, the point is rounded to about a kilometre before it is used. It is passed to the services that answer that question (OpenStreetMap's Nominatim and Photon, Open-Meteo, Ticketmaster and SeatGeek) and is not written to any database, not attached to an account, and not used to follow you. Our host, Vercel, keeps short-lived request logs that can include the address of a request; we do not use them for anything but fixing errors.

You can always type a town instead. Location is never required.

A plan is encoded into its own link: the names you typed, the answers, the city and the date. We do not store it. Anyone you send the link to can open it, so only send it to people you would hand the card to.

The website remembers your last city and the names you typed in your browser's own storage, on your device only, so the next spin starts where you left off. Clearing your browser data removes it.

When everybody answers on their own phone, the party is held in our database while people answer: the city, the date, first names, and each person's five answers. Every party is deleted automatically 45 days after it was created.

A post stores what you typed (the title, time, place and link) and your email. The email is there only so the person reviewing posts can check you are real. It is never shown on IRL and no public part of IRL ever reads it. We also keep a one-way keyed hash of the network address the post came from, which lets us limit how many posts one sender can make and cannot be turned back into the address.

Reports work the same way: the event, the reason you chose, and the same kind of hash, so one person cannot report one thing many times.

IRL+ is sold through Apple. Apple handles payment, and we never see your card. We use RevenueCat to confirm with Apple which subscription is active on your device; it receives an anonymous app user identifier and your purchase receipts from Apple, not your name or email. RevenueCat's own policy is at revenuecat.com/privacy.

Some outbound links, marked “Affiliate link” beside them, pass through our own address (irl.modernmustardseed.com/go) on the way out. When you tap one we write down which program it was, which page it was on, and the city it was for, plus a keyed hash of the request address that cannot be turned back into the address. We do not store the address itself, the link, or anything about you. The site you land on, and the network that runs its program, handle what happens there under their own privacy policies. What affiliate links are, and the rules we hold them to.

• Vercel hosts the site and the server.
• Supabase holds the invites, posts and reports described above.
• OpenStreetMap's Nominatim and komoot's Photon answer place lookups.
• Open-Meteo answers the forecast and a place's time zone.
• Ticketmaster and SeatGeek answer event lookups, and public calendars are read as published.
• Apple and RevenueCat handle purchases in the app.

None of them receive anything from us beyond what that one request needs.

Family day is built for households with kids in them, and a parent runs it. IRL is not directed at children on their own and does not knowingly collect anything from a child beyond a first name a parent types into a plan.

Email agents@modernmustardseed.com with what you want removed: a party code, the email you posted with, or anything else. We delete it and write back to confirm. To remove what lives on your device, clear this site's data in your browser, or delete the app.

If this changes, the date at the top changes with it, and anything that collects more than this page describes will say so before it does. Questions go to agents@modernmustardseed.com. The rules for posting are in the terms.