CalendarJack

Privacy

Small service. Small data footprint.

CalendarJack connects to GroupMe only after you approve it on GroupMe. We store your GroupMe access token in encrypted form so the calendar can update. We never see or store your GroupMe password.

CalendarJack connects to Google only after you approve it on Google. We store the connection in encrypted form so your calendar can stay up to date. The connection is a refresh token. It stays valid until you disconnect it, or until you remove CalendarJack in your Google account. CalendarJack reads and writes only the calendars it makes for you. We never see or store your Google password.

CalendarJack connects to Microsoft (the account Outlook uses) only after you approve it there. We store the connection in encrypted form so your Outlook calendar can stay up to date. Microsoft replaces that token every time we use it, and we store the new one. We never see or store your Microsoft password.

Microsoft asks for one permission, Calendars.ReadWrite. That permission is wider than the Google one. It covers every calendar in your Microsoft account, not only the calendars CalendarJack makes. Microsoft offers no narrower permission for making a calendar. CalendarJack makes one calendar for each link you add, writes that group's events into it, and touches nothing else.

What CalendarJack stores

CalendarJack stores:

  • Your GroupMe account identifier.
  • An encrypted GroupMe access token.
  • The encrypted name and email address of each connected account.
  • A comparable digest of that address, so a sign-in that comes back can be matched to the account it belongs to.
  • The identifier and name of each group you chose.
  • A recent copy of that group's events.

The stored events can contain titles, times, descriptions, and locations. They also contain the GroupMe nicknames of the people who marked themselves going or not going.

What a signed-in browser stores

Each browser you sign in on gets one session row. CalendarJack keeps, for each one:

  • Which connected account signed in.
  • A short browser label, such as "Safari on iPhone". No version number is kept.
  • When that browser signed in, and when it was last used.

The You page shows these rows back to you. Sign out of every other browser ends them all but this one.

For a Google connection CalendarJack also stores:

  • Your Google account identifier.
  • The encrypted email address of that account.
  • An encrypted access token.
  • An encrypted refresh token.

For a Microsoft connection CalendarJack also stores:

  • Your Microsoft account identifier.
  • The encrypted email address of that account.
  • An encrypted access token.
  • An encrypted refresh token.

Who can see a calendar

Anyone with a calendar's private link can read that calendar. Apple, Google, and Microsoft receive the link when somebody subscribes. Keep the link inside the group. The organizer can turn off an old link at any time.

Deletion

Delete for everyone removes one calendar and its link. Disconnect removes one connected account and its encrypted token. Delete account and everything in it removes the account, every connected account, every calendar, the stored events, every browser session, and the record described below.

CalendarJack counts how many people read each calendar, so the organizer can be told whether the link reached the group. It keeps one row per calendar per day per reader. The row holds no address and no browser details. It holds a one-way code made from them, which tells two readers apart and identifies neither. Rows older than 7 days are deleted.

CalendarJack keeps a record of each time a calendar is added to one of your calendar apps or removed from it. The record is what lets us answer you if a calendar arrives or disappears unexpectedly. Each line holds the date, what happened, and which account it happened to. It holds no event and no address. Lines older than 90 days are deleted. Deleting your account deletes all of yours at once.

Disconnect a Google account and CalendarJack removes the calendars it made in that Google account. Delete your CalendarJack account and it does the same. CalendarJack also asks Google to forget the connection.

Disconnect a Microsoft account and CalendarJack removes the calendars it made in that Microsoft account. Delete your CalendarJack account and it does the same. CalendarJack also deletes the tokens it holds. Microsoft publishes no way for CalendarJack to cancel the permission itself. To remove CalendarJack at Microsoft, open account.live.com/consent/Manage for a personal account. Use the My Apps page for a work or school account.

Contact

Palmetto Anesthesia operates CalendarJack. Write to P.O. Box 216, Lexington, South Carolina 29071. Phone: 904-438-4265. Email: [email protected].

Last updated September 9, 2026.