Privacy notice

Controller and contact

The controller under the GDPR is Verilob GmbH, Am Fuchsbogen 7, 82256 Fürstenfeldbruck, Germany, represented by its managing director Andreas Wolf. The imprint has the full details.

For privacy questions and requests, write to info@verilob.com. We have not appointed a data protection officer; at our size none is required.

What this service is

With somanyplans, someone asks a question and shares a link. Nobody needs an account: not the person who asks (the organizer), not the people who answer (participants). Instead of an account, your browser holds a random token, and a secret link gets you back from another device.

Whoever has the link can open the poll.

Server logs, firewall and rate limits

Access logs

Every request is logged at our edge server: IP address, time, method, path, status code, response size, referrer, browser (user agent) and the verdict of the web application firewall. The application logs a request id and status codes, never the content you type. The logs are kept for 14 days, on the server and in our log index, and are not combined with other data or used to recognize people.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in running the service securely and finding faults.

Secret links

The admin link and the edit link carry a secret in their path. Opening one sets a cookie and immediately redirects to the clean address, and the access log masks the secret before the line is written, so no log, log index or backup holds a usable secret.

Firewall and rate limits

A web application firewall checks each request for known attack patterns. To stop abuse, the edge counts requests per IP address and slows down or rejects senders above a limit. These counters live in memory only and are not stored.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in protecting the service and its users.

Cookies and tokens

We set only cookies that are strictly necessary to provide what you asked for (§ 25(2) no. 2 TDDDG), so there is no cookie banner. There are no tracking, analytics or advertising cookies.

Organizer cookie

Holds a random organizer token, set when you create a poll. It is how the service recognizes you as the organizer of your polls. With the token we store the time of your last visit, your language (for mails we send you) and which answers you have already seen. Lifetime: 12 months, renewed on every organizer visit.

Participant cookie (one per event)

Holds a random participant token, set when you answer. It lets you see and change your answer and pre-fills your name in the same event. Lifetime: 6 months, renewed on every visit.

Language cookie

Remembers the language you chose, and is set only when you switch the language yourself. Lifetime: 12 months.

Polls, names and comments

What the organizer writes

The question, the options, an optional description and, later, the outcome.

Legal basis: Art. 6(1)(b) GDPR, providing the service as the terms of use describe it.

What participants write

Your display name, your answer and an optional comment. Only enter what everyone with the link may see; a first name or nickname is enough.

Legal basis: Art. 6(1)(b) GDPR.

Who sees answers

The organizer chooses per poll: everyone with the link sees names, answers and comments; or everyone sees counts only; or only the organizer sees the results. The poll page shows which setting applies. Link previews never contain names, counts or results.

Anonymous polls

An anonymous poll stores no names, and the organizer gets counts only. Your browser can still withdraw its own answer through its token; that link between token and answer is never shown to the organizer or included in any export.

History of answers

Answers are kept as a history: an answer, a change and a withdrawal are each a new entry, and nothing is overwritten. This is what makes undo work and keeps the results honest. The history is deleted together with the poll.

Organizer recovery email and return code

Recovery email

Optional. If you give an address, we use it for two things only: to send you the admin link when you ask, and to warn you 14 days before your poll is deleted. We store it until you remove it, or until the last poll you organize is deleted.

Legal basis: Art. 6(1)(b) GDPR, you asked for it.

Return code

Optional. A short code, shown once, that gets you back to your polls from another device. We store it only as a hash and delete it after 30 days, after it has been used three times, or together with your organizer token.

Legal basis: Art. 6(1)(b) GDPR.

“Email me my link”

After answering, you can have the edit link to your answer sent to an email address. We use the address for that one mail and do not store it. The mail is sent through Microsoft 365 (Microsoft Ireland Operations Ltd), which processes it on our behalf and keeps its own delivery records.

Legal basis: Art. 6(1)(b) GDPR, you asked for the mail.

Reporting a poll

Every poll has a report link. A report sends one mail to us containing the poll’s link, the reason you write and, if you choose to give it, your email address so we can reply. Reports are not stored in the service; we delete the mail once the report is handled. We do not pass your address on to the organizer.

Legal basis: Art. 6(1)(c) GDPR together with Art. 16 of the Digital Services Act, which obliges us to accept such notices, and Art. 6(1)(f) GDPR, our legitimate interest in keeping the service free of unlawful content.

How long we keep what

A poll is “active” whenever someone answers, the organizer changes something or the organizer looks at it. If a recovery email is set, we warn the organizer 14 days before deletion, and the results page says so during the last 30 days.

Poll content and outcome

6 months after the last activity, or 7 days after the organizer deletes the poll.

Answers, names, comments and their history

Together with the poll.

Participant token

Together with the poll.

Organizer token, its last visit, language and read markers

Together with the last poll the token organizes.

Recovery email

When the organizer removes it, or together with the last poll the token organizes.

Return code (stored as a hash)

After 30 days, after its third use, or together with the organizer token.

Address for “email me my link”

Not stored. The mail provider keeps its own delivery records.

Reports

Not stored in the service; the mail is deleted once the report is handled.

Access logs and application logs

14 days.

Database backups (encrypted)

30 days.

Hosting

The service runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). The server and its logs are in Germany.

Recipients

Besides the people who hold a poll’s link, who see what its visibility setting shows, two processors receive personal data, both on our behalf and under a data processing agreement: the hosting provider above, and Microsoft Ireland Operations Ltd, Dublin, Ireland, for outgoing mail.

Where Microsoft or its subprocessors process data outside the EU, in particular in the United States, the transfer rests on the EU adequacy decision for the EU-US Data Privacy Framework, under which Microsoft is certified (Art. 45 GDPR), and on the EU standard contractual clauses (Art. 46 GDPR).

Nobody else receives your data. We do not sell data, show advertising, or use analytics, and pages load no scripts, fonts or images from third parties. We disclose data to authorities only where the law obliges us to.

Your rights, without an account

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on our legitimate interests (Art. 21). There is no automated decision-making or profiling.

Because there are no accounts, we do not know who you are, and we do not collect extra data to find out (Art. 11 GDPR). We match a request to data through the admin link or edit link you hold. Much of it you can do yourself at any time: organizers can delete any answer or the whole poll, participants can change or withdraw their own answer. A request we cannot match to any data, we answer as such.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Changes to this notice

We update this notice when the service or the law changes. The version date below tells you which version you are reading. When sign-in becomes available, this notice will describe it before it goes live.