Privacy Policy.

What this is

BYU Calendar (byucalendar.com) is an independent student project that gathers publicly published BYU events into one searchable place. It is not an official Brigham Young University service and is not affiliated with or endorsed by BYU.

We serve a Utah audience and describe your rights below in line with the Utah Consumer Privacy Act. We apply those rights to everyone, regardless of where you browse from.

Data we handle

• Account details. If you create an account: your name, your BYU email address, and a hashed version of your password — never the password itself. A signed session cookie keeps you signed in, and for security each signed-in session also records the IP address and browser type it was created from, so suspicious sessions can be reviewed and ended. Signing out everywhere removes those session records.
• Your saved items. Bookmarked events and saved searches, tied to your account. The daily digest email is off until you turn it on from your account settings; you can turn it off there or from any digest email.
• Your contributions. Listings and tags you publish are public but shown without your name or email. Reports you submit are private and visible only to site administrators.
• Your personal picks. If you use the picks chat, your typed or tapped answers become a short interest list on your account. While you are signed in, the events you open, save, share, or map feed anonymous interest counters (categories and tags with a fading score — never which specific events you viewed) that shape the suggested events on My calendar. Tuning your picks clears that interest list and the counters before rebuilding them from your new answers. Deleting your account removes all of it.
• Usage analytics. How the site is used — pages and events viewed, searches, exports, approximate region, browser and device type, and the site that sent you here. These are aggregate counts built in-house: analytics use no cookies, never record your name, email, or IP address, and are kept for 180 days. We use them to decide what to improve.
• Server logs. Standard request logs (IP address, time, requested page) kept for security and reliability.

You can browse the entire calendar, search, and download events without an account and without signing in.

How we measure usage

We use analytics to answer simple questions: which events and features are people actually looking for? The measurements are built-in aggregate usage counts — cookieless, free of names, emails, and IP addresses, and pruned after 180 days. They are not used to build advertising profiles, and they are never sold.

We do not use analytics to follow you to other websites or apps, and we do not combine analytics with advertising networks.

Hard limits

• Sell or rent personal data to anyone.
• Run advertising or ad-network tracking on this site.
• Track you across other websites or apps.
• Display your name or email next to anything you publish.

Who receives data

Only the services required to run the site:

• Hosting and network. Our hosting provider and Cloudflare (DNS and site delivery) handle traffic to the site.
• Email delivery. Resend sends verification and password-reset emails to your address.
• AI assistance. Smart-search phrases and the picks-chat question wording are sent to our configured AI provider for interpretation; no account data or event inventories go along. Everything else — matching, profiles, and picks — is computed on our servers.
• Typography. Google Fonts serves the site's fonts; your browser requests them directly.
• Analytics. Measured in-house by the cookieless system described above — no third-party analytics service receives this data.

We may also disclose information when the law requires it. We do not otherwise share personal data.

Cookies and storage

One essential cookie keeps you signed in; without it, accounts and saved events could not work. We do not use advertising or cross-site tracking cookies, and the calendar itself works fully without any cookie.

Data retention and security

Account data is kept while your account is active; deletion requests remove it. Listings and tags stay until their author or an administrator removes them. Analytics rows expire automatically after 180 days, and server logs are kept only for a limited period. Passwords are stored only as hashes, resetting a password signs out every session, and all traffic is encrypted with HTTPS.

Your rights in Utah

If you are a Utah resident, you may ask us to:

• Confirm what personal data we have about you and receive a copy in a portable format.
• Delete your personal data.
• Opt out of targeted advertising, the sale of personal data, or profiling for major decisions — we do none of these, so there is nothing to opt out of.

Email [email protected] and we will respond within 45 days. If we decline a request, you can appeal by replying to our answer, and we will take a fresh look.

Children

This site is built for the BYU community, and accounts require a university email address. We do not knowingly collect personal data from children under 13.

Changes to this policy

If we change this policy, we will post the new version on this page with an updated effective date.

Contact us

Privacy questions, access requests, or deletions: [email protected]