Privacy Policy

Information you provide

We process the location, date, time, group size, budget, moods, and other filters you enter to find places and plan an evening. Choosing “Use my location” asks your browser for permission to share your device’s location. You can enter a city, neighborhood, or ZIP code instead and change location permissions in your browser.

When you save places or plans, record visits, or vote on a shared plan, we store the information you submit. This can include venue references, notes, preferences, planned stops and times, visit feedback, and an optional voter name. Saved activity can be used to personalize recommendations. If you email us, we receive your email address and the contents of your message.

Cookies and browser storage

You can browse without creating a login. Saving information can create a guest identifier linked to a signed cookie called ts_uid, which lasts up to one year. Voting uses a separate ts_voter cookie that lasts up to 90 days. These identifiers help retrieve your saved information and associate votes with your browser.

We also use browser session storage to restore your search choices when you return from a venue page. Restored venue results expire after five minutes; search choices may remain for the browser tab’s session. Browser session restoration can preserve this storage. You can clear cookies and site storage in your browser settings.

Clearing these identifiers may prevent us from reconnecting you with guest saves or votes. It does not automatically delete the corresponding database records.

How information is used and shared

We use information to deliver recommendations, remember saves, build and share plans, process votes, respond to requests, and maintain the service. Hosting and service providers process information needed to deliver these features. Requests may include technical information such as IP address, browser details, and request logs.

• Google Maps and Places: Search text, coordinates, and venue identifiers are used to find and display locations. Loading an embedded Google map connects your browser to Google. Google’s Privacy Policy is incorporated into this policy for your use of Google Maps features.
• Weather and venue information: When enabled, Open-Meteo and AirNow receive search-area coordinates for weather or air quality. Optional venue and crowd providers, including BestTime, SerpAPI, Yelp, and Foursquare, receive location or venue queries when their features are enabled.
• Hosting: Vercel and our database infrastructure process requests and stored information to operate the site.
• Outside websites: Clicking a venue website, directions, or booking link takes you to a service with its own privacy practices.

We do not currently sell personal information or use it for targeted advertising. We may disclose information when required by law or necessary to address fraud, abuse, or security incidents. We will update this policy when our practices change.

Shared plans

Anyone with a shared-plan link can view the plan and vote. Information visible through that link can include your plan title, city, stops, planned times, group size, and voter names or votes. Recipients can forward the link. Avoid putting sensitive personal information into titles, notes, or voter names.

How long information stays

Saved places, plans, visits, votes, and related preference records are retained to provide those features. There is currently no automatic inactivity-based deletion schedule for guest database records. Cookie expiration does not set the lifetime of those records.

You can remove saved places and plans using the available controls. For other deletion requests, contact us. We may need information to verify that records belong to you, and we may be unable to identify guest records after their browser identifiers are lost. Limited information may need to be retained for legal obligations or security; copies in backups and provider logs may remain until their retention cycles expire.

Your choices and requests

You can decline device-location access, clear browser storage, remove saved content, and contact us to request access, correction, or deletion of information associated with you. Depending on where you live, additional privacy rights may apply. We will handle requests under applicable law and may ask you to verify your connection to the information. Do not send passwords or session cookies by email.

Google sign-in and account security

We use safeguards such as signed guest-session identifiers and restricted access to application systems. No internet service can guarantee absolute security. Protect access to your device and shared-plan links.

Google sign-in is optional and provided through Firebase Authentication. We receive your verified email address and Firebase user identifier to connect you with your saves and preferences. We do not receive your Google password or request access to your Gmail, contacts, or Google Drive. Google processes sign-in information under its Privacy Policy.

With your choice at sign-in, this browser’s guest saves and preferences are transferred to your account. Existing account preferences and duplicate saved places take priority. Account activity remains until you remove it using the available controls or request deletion. Contact us from your account email for account deletion requests.

A protected tp_session cookie keeps you signed in for up to seven days; signing out invalidates that session. A tp_csrf cookie lasts up to one hour and helps protect account changes. Signing out does not delete your account saves. Expired session records and hashed sign-in rate-limit records are cleaned up during later sign-in attempts. We check Firebase account status before allowing access to account data.

Children and policy changes

This service is intended for a general audience and is not directed to children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.

We will post revisions here with an updated effective date and provide additional notice when required. Our Terms of Use describe the conditions for using Tonight’s Plans.

Contact us

Tonight’s Plans is operated by Iron Digital MI. For questions about this page, contact itsrong313@gmail.com.