Privacy Policy

Shiftto (the “Service”) is a free web tool that supports shift scheduling for one-off events such as school festivals and club activities. This page explains the types of information the Service collects, how it is used, how long it is kept, and the third-party services used.

1. Information we collect

The Service collects the following information in order to operate.

• Information entered by the organizer when creating an event (event name, dates, time periods, roles, required headcount, a hash of the admin PIN, etc.)
• Information entered by participants when submitting shift availability (name, preferred time periods, daily slot limit, roles they cannot do, etc.)
• An identifier (name and edit key) stored in the browser's localStorage so that responses can be easily re-edited on the same device
• The admin PIN, temporarily stored in the browser's sessionStorage when the organizer enters the event admin screen (cleared when the tab is closed)

A name is an optional free-text string used to identify participants within an event. The Service does not ask you to enter sensitive information such as driver's license or credit card numbers. The admin PIN is stored only in hashed form (SHA-256); the original string you enter is not stored.

2. Purposes of use

• To provide the Service's features, such as auto-assignment, display, printing and CSV export of shift tables
• To recall previous responses when re-editing from the same device
• To prevent misuse and to investigate and improve defects in the Service

3. Storage location and retention

Event data is stored on Cloudflare D1 (a database service). Events have a retention period of roughly 30 days from creation, and data past that period may be deleted. The organizer can also delete event data at any time from the admin screen.

4. Provision to third parties

We do not provide collected information to third parties without consent, except where required by law. However, the Service uses the third-party services listed below, and data is passed to their providers within the scope of the service they provide.

• Cloudflare, Inc. (hosting and database infrastructure)

5. Advertising

Third-party vendors, including Google, may use cookies to serve ads on this Service. By using cookies, Google serves ads based on your previous visits to this Service and other sites.

To disable the cookies Google uses for ad serving, use Ads Settings. You can also visit aboutads.info to opt out of cookies used by third-party vendors for ad delivery.

6. Requests for disclosure or deletion

To review, correct or delete responses you entered as a participant, please contact the event organizer, who can handle this from the admin screen. For disclosure or deletion requests directed to the operator of the Service, please use the contact below.

7. Contact

For inquiries about this policy, please use the contact below.

Contact: tabunnaoru@gmail.com

8. Changes to this policy

This policy may be changed without notice in response to changes in the Service or amendments to laws. Important changes will be announced on this page.